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Abstract 



It is conjectured that quantum computers are able to solve certain problems more quickly than any determin- 
istic or probabilistic computer. For instance, Shor's algorithm is able to factor large integers in polynomial 
time on a quantum computer. A quantum computer exploits the rules of quantum mechanics to speed up 
computations. However, it is a formidable task to build a quantum computer, since the quantum mechanical 
systems storing the information unavoidably interact with their environment. Therefore, one has to mitigate 
the resulting noise and decoherence effects to avoid computational errors. 

In this work, I study various aspects of quantum error control codes - the key component of fault-tolerant 
quantum information processing. I present the fundamental theory and necessary background of quantum 
codes and construct many families of quantum block and convolutional codes over finite fields, in addition 
to families of subsystem codes. This work is organized into these parts: 

Quantum Block Codes. After introducing the theory of quantum block codes, I establish conditions when 
BCH codes are self-orthogonal (or dual-containing) with respect to Euclidean and Hcrmitian inner 
products. In particular, I derive two families of nonbinary quantum BCH codes using the stabilizer 
formalism. I study duadic codes and establish the existence of families of degenerate quantum codes, 
as well as families of quantum codes derived from projective geometries. 

Subsystem Codes. Subsystem codes form a new class of quantum codes in which the underlying classical 
codes do not need to be self-orthogonal. I give an introduction to subsystem codes and present several 
methods for subsystem code constructions. I derive families of subsystem codes from classical BCH 
and RS codes and establish a family of optimal MDS subsystem codes. I establish propagation rules of 
subsystem codes and construct tables of upper and lower bounds on subsystem code parameters. 

Quantum Convolutional Codes. Quantum convolutional codes are particularly well-suited for communi- 
cation applications. I develop the theory of quantum convolutional codes and give families of quantum 
convolutional codes based on RS codes. Furthermore, I establish a bound on the code parameters 
of quantum convolutional codes - the generalized Singleton bound. I develop a general framework for 
deriving convolutional codes from block codes and use it to derive families of non-catastrophic quantum 
convolutional codes from BCH codes. 

Quantum and Classical LDPC Codes. LDPC codes are a class of modern error control codes that can 
be decoded using iterative decoding algorithms. In this part, I derive classes of quantum LDPC codes 
based on finite geometries, Latin squares and combinatorial objects. In addition, I construct families 
of LDPC codes derived from classical BCH codes and elements of cyclotomic cosets. 

Asymmetric Quantum Codes. Recently, the theory of quantum error control codes has been extended 
to include quantum codes over asymmetric quantum channels — qubit-flip and phase-shift errors may 
occur with different probabilities. I derive families of asymmetric quantum codes derived from classical 
BCH and RS codes over finite fields. In addition, I derive a generic method to derive asymmetric 
quantum cyclic codes. 
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CHAPTER 1 



Introduction 



Quantum computing is a relatively new interdisciplinary field that has recently attracted many researchers 
from physics, mathematics, and computer science. The main idea of quantum computing is to utilize the 
laws of quantum physics to perform fast computations. Quantum information processing can be beneficial 
in numerous applications, such as secure key exchange or quick search. Arguably, one of the most attractive 
features is that quantum algorithms are conjectured to solve certain computational problems exponentially 
faster than any classical algorithm. For instance, Shor's quantum algorithm can factor integers faster than 
any known classical algorithm. 

Quantum information is represented by the states of quantum mechanical systems. Since the information- 
carrying quantum systems will inevitably interact with their environment, one has to deal with decoherence 
effects that tend to destroy the stored information. Hence, it is infeasible to perform quantum computations 
without introducing techniques to remedy this dilemma. One method is to apply fault-tolerant operations 
that make the computations permissible under a certain threshold value. These fault-tolerant techniques 
employ quantum error control codes to protect quantum information. 

The main contribution of this work is the development of novel techniques for quantum error control, 
including the construction of numerous quantum error control codes to guard quantum information. 



1.1 Background 

The state space of a discrete quantum mechanical system is given by a finite-dimensional Hilbert space, 
namely by a finite-dimensional complex vector space that is equipped with the standard Hermitian inner 
product. The states of the quantum system are assumed to be vectors of unit length in the induced norm. 
Any quantum mechanical operation other than a measurement is given by a unitary linear operation. 

For quantum information processing, one chooses a fixed orthonormal basis of the state space of the 
quantum mechanical system, called the computational basis. The basis vectors represent classical information 
that is processed by the quantum computer. To fix ideas, consider a quantum system with two-dimensional 
state space C^. The basis vectors 



can be used to represent the classical bits and 1. As the indices of the basis vectors can be difficult to read, 
it is customary in quantum information processing to use Dirac's ket notation for the basis vectors; namely, 
the vector vq is denoted by |0) and the vector vi is denoted by Therefore, any possible state of such a 
two-dimensional quantum system is given by a linear combination of the form 





where a, 6 G C and |ap + |6p = 1, 



1 
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as any vector of unit length is a possible state. One refers to the state vector of a two-dimensional quantum 
system as a quantum bit or qubit. 

The superposition or linear combination of the basis vectors |0) and |1) of a quantum bit is one marked 
difference between classical and quantum information processing. One can measure a quantum bit in the 
computational basis. Such a measurement of a quantum bit in the state a |0) + |1) leaves the quantum bit 
with a probability of |ap in state |0) and with probability |6p in state Furthermore, the outcome of this 
probabilistic operation is recorded as a measurement result. 

In quantum information processing, the operations manipulating quantum bits follow the rules of quantum 
mechanics, that is, an operation that is not a measurement must be realized by a unitary operator. For 
example, a quantum bit can be flipped by a quantum NOT gate X that transfers the qubits |0) and |1) to 
|1) and |0), respectively. Thus, this operation acts on a general quantum state as follows. 

X(a|0) +6|1)) = a|l) +6|0) . 

With respect to the computational basis, the quantum NOT gate X is represented by the matrix 

Other popular operations include the phase flip Z , the combined bit and phase-flip Y , and the Hadamard 
gate H, which are represented with respect to the computational basis by the matrices 

The state space of a joint quantum system is described by the tensor product of the state spaces of its 
parts. Consequently, a quantum register of length n, which is by definition a combination of n qubits, can 
be represented by the normalized complex linear combination of the 2" mutually orthogonal basis states in 

, namely as a linear combination of the vectors 

\lP) = IV'l) «) IV'2) «) ... (E) IV'n) = IV'lV'2-.V'n) whcrC G {|0) , 

Operations acting on two (or more) quantum bits include the controlled not operation CNOT, which 
realizes the map 

|00) ^ |00) , |01) ^ |01) , |10) 111) , 111) ^\10). 
In the computational basis, the CNOT operation is described by the matrix 

\ 

1 
1 " 
10/ 

1.2 Quantum Codes 

Quantum error control codes like their classical counterparts are means to protect quantum information 
against noise and decoherence. Quantum codes can be classified into additive or nonadditive codes. If the 
code is defined based on an abelian subgroup (stabilizer), then it is called an additive (stabilizer) code. The 
structure and construction of additive codes are well-known. Additive codes are also defined over a vector 
space, therefore addition (or subtraction) of two codewords is also a valid codeword in the codespace [34]. 

Shor's demonstrated the first quantum error correcting code [ ]. The code encodes one qubit into nine 
qubits, and is able to correct for one error and detect two errors. Shortly Gottesman [ ], Steane [ ], and 
Calderbank, Rains, Shor, Sloane developed the stabilizer codes and the problem transferred to finding 
classical additive codes over the finite fields Fg and ¥^2 that are self-orthogonal or dual-containing with 
respect to the Euclidean or Hermitian inner products, respectively. Since then, many families of quantum 
error-correcting codes have been constructed, also, bounds on the minimum distance and code parameters 
of quantum codes have been driven. In [ ] , a table of upper bounds on the minimum distance of binary 
quantum codes has been given. Moreover, propagation rules to drive new quantum codes from existing 
quantum codes have been shown. 

Nonbinary quantum codes, inspired by their classical counterparts, might be useful for some applications. 
For example, in quantum concatenated codes, the underline finite field would be F2m, which is useful for 



CNOT = 



1 
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decoding operations [ . ]. In this work I derive both binary and nonbinary quantum block and convolutional 
codes in addition to subsystem codes. The foundation materials that will be used in the next chapters are 
presented in Chapters I, II, and III. 

In contrast, the nonadditive codes do not have uniform structure and are not equivalent to any nontrivial 
additive codes. Knill showed in that nonadditive codes can give better performance. As far as I know, 
the literature lacks a comparative analytical study among these two classifications of codes. Roychowdhury 
and Vatan [ ' ] established sufficient conditions on the existence of nonadditive codes, introduced strongly 
nonadditive codes, and proved Gilbert- Varshimov bounds for these codes. Furthermore, they also showed 
that the nonadditive codes that correct t errors satisfy asymptotically rate R> 1 — 2H2{2t/n). Arvind el al. 
developed the theory of non-stabilizer quantum codes from Abelian subgroup of the error group [18]. 

There is also a different approach, to design quantum codes, that is known as entangled-assisted quantum 
codes. Designing quantum codes by entanglement property assumes a shared entangled qubits between 
two parties (sender and receiver). Some progress in this theory and constructing quantum codes using 
entanglement are shown in [87, 33]. 

1.3 Problem Statement 

In this section, I will state some of the open research problems that I have been investigating. My goal is to 
construct good families of quantum codes to protect quantum information against noise and decoherence. I 
will construct quantum block and convolutional codes in addition to subsystem codes. 

Quantum Block Codes. A well-known method of constructing quantum error-correcting codes is by using 
the stabilizer formalism. Let S* be a stabilizer abelian subgroup of an error group G, and C{S) be a subgroup 
in G that contains all elements which commute with every element in S, ((i.e. S C C{S), An expanded 
explanation is provided in Chapter 3). If we also assume that S and C{S) can be mapped to a classical 
code C and its dual C'^, respectively. Then a quantum code Q exists, stabilized by the subgroup S as 
shown by the independent work of Calderbank and Shor [.■'<■>] and Steane [17(i]. The quantum code Q is a 
q'' dimensional subspace of the Hilbert space C , and it has parameters [[n, fc, d]]q with k information logic 
qubits and n encoded qubits. The code Q is able to correct all errors up to [{d — 1)/2J, see Chapter 3 for 
more details. A quantum code is called impure if there is a vector in C with weight less than any vector 
in {C-^\C); otherwise it is called pure. Pure quantum codes have been constructed based on good classical 
codes (i.e. codes with high minimum distance). However, the construction of impure quantum codes from 
classical codes with poor distances has not been widely investigated. Surprisingly, one can construct good 
impure quantum codes based on bad classical codes (i.e. codes with low minimum distance). 
Research Problems. The goals of my research in quantum block codes are to: 

a) Construct families of quantum block codes over finite fields based on self-orthogonal (or dual-containing) 
classical codes. Determine whether there are families of impure quantum codes such that the stabilizer 
has many vectors with small weights and these families are not extended codes. 

b) Study the probability of undetected errors for some families of stabilizer codes and search for codes with 
undetected error probability that approaches zero. 

c) Determine whether stabilizer codes be constructed from polynomial and Euclidean geometry codes since 
these codes have the feature of majority list decoding, and what are the conditions that will determine 
whether these codes will be self-orthogonal (or dual-containing)? 

d) Analyze the method by which a family of stabilizer codes uses fault-tolerant quantum computing. What 
is its threshold value? Can it be improved? And if so, what assumptions must be made to improve it? 

e) Determine whether quantum stabilizer codes, in which errors have some nice structure, can correct beyond 
the minimum distance, since we know that fire and burst-error classical codes can correct errors beyond 
half of their minimum distance. 

Subsystem Codes. Subsystem codes are a relatively new construction of quantum codes based on isolating 
the active errors into two subsystems. Hence, a quantum code Q is a tensor product of two subsystems A and 
B, i.e. Q = A 1^ B. The dimension of the subsystem A is q'' while the dimension of the subsystem B is q^; 
the code Q has parameters [[n,k,r,d]]q. A special feature of subsystem codes is that any classical additive 
code C can be used to construct a subsystem code. One should contrast this with stabilizer codes, where 
the classical codes are required to satisfy self-orthogonality (or dual-containing) conditions. Many interesting 
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problems have not yet been addressed on subsystem codes such as bounds, weight enumerators, encoding 
circuits and famiUes of subsystem codes. Also, there are no tables of upper bounds, lower bounds, or best 
known subsystem codes. 

Research Problems. The goals of my research in subsystem codes are to: 

a) Investigate properties of subsystem codes and find good subsystem codes with high rates and large mini- 
mum distances. How do stabilizer codes compare with subsystem codes with r > 1? How are families of 
subsystem codes constructed based on classical codes? 

b) Analyze the conditions under which classical codes will give us subsystem codes with large gauge qubits 
r > 1. Assuming we have RS or BCH codes with length n and designed distance S that can be used 
to construct subsystem codes. How much does the minimum distance for subsystem RS or BCH codes 
increase, if k and r are exchanged? 

c) Implement the linear programming and Gilbert- Varshimov bounds, using Magma computer algebra, to 
derive tables of upper bounds, lower bounds, and best known codes of subsystem codes over finite fields. 

d) Determine what the efficient encoding and decoding circuits look like for subsystem codes, and whether 
we can draw an encoding circuit for a subsystem code from a given encoding circuit of a stabilizer code. 

Quantum Convolutional Codes. Quantum convolutional codes (QCC's) seem to be useful for quantum 
communication because they have online encoder and decoder algorithms (circuits). One main property 
of quantum convolutional codes is the delay operator where the encoder has some memory set. However, 
quantum convolutional codes still have not been studied extensively. Furthermore, many interesting and open 
questions remain regarding the properties and the usefulness of quantum convolutional codes. At this time, 
it is not known whether quantum convolutional codes offer a decisive advantage over quantum block codes, 
since we do not yet have a well-defined formalism of quantum convolutional codes. For example, the CSS 
construction, projectors, and non-catastrophic encoders are not clearly defined for quantum convolutional 
codes. In other words, except for the work by QUivier [139], there are only some examples of quantum 
convolutional codes with 1/3, 1/4, and 1/n code rates. 

Research Problems. The goals of my research in quantum convolutional codes are to: 

a) Formulate a stabilizer formalism for convolutional codes that is similar to the well-defined stabilizer 
formalism of quantum block codes, and to construct families of quantum convolutional codes based on 
classical convolutional codes. 

b) Determine whether it is possible to construct quantum convolutional codes, given RS and BCH codes with 
length n and designed distance (5, and to determine under which conditions these codes can be mapped to 
self-orthogonal convolutional codes, what the restrictions are on S, and whether parameters of quantum 
convolutional codes can be bounded using a generalized Singleton bound. 

c) Design online efficient encoding and decoding circuits for quantum convolutional codes. 

d) Establish whether a scenario for quantum convolutional codes, where the errors can be isolated into sub- 
systems, exists that is similar to error avoiding codes (subsystem codes) that can be constructed from 
block codes. 

Quantum and Classical LDPC Codes. Low-density parity check (LDPC) codes are a significant class 
of classical codes with many applications. Several good LDPC codes have been constructed using random, 
algebraic, and finite geometries approaches, with containing cycles of length at least six in their Tanner 
graphs. However, it is impossible to design a self-orthogonal parity check matrix of an LDPC code without 
introducing cycles of length four. 

Research Problems. The goals of my research in subsystem codes are to: 

a) Construct many families of quantum LDPC codes, and study their prosperities. Will the performance of 
classical LDPC codes be the same as performance of quantum LDPC codes over asymmetric or symmetric 
quantum channels? 

b) What are the conditions for classical LDPC codes to have less cycles of length four and still give us good 
quantum LDPC codes. 

c) Study the decoding aspects of quantum LDPC codes. 

Asymmetric Quantum Codes. Recently, the theory of quantum error control codes has been extended 
to include quantum codes over asymmetric quantum channels — qubit-flip and phase-shift errors may occur 
with different probabilities. I derive families of asymmetric quantum codes derived from classical BCH and 
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RS codes over finite fields. In addition, I derive a generic method to derive asymmetric quantum cycHc codes. 

1.4 Work Outline 

Some of the research problems stated in the previous subsection are completely solved up on this work, some 
are left as an extension work, and obviously some will remain open. In this work I construct many families 
of quantum error control codes and study their properties. The work is structured into these parts and the 
main results are stated as follows. 

I) In part I, Chapters 3, 4, 5, 6, I study families of quantum block codes constructed using the CSS 
construction. I establish conditions when nonbinary primitive BCH codes are dual-containing with 
respect to Euclidean and Hermitian products; consequently I derived families of quantum BCH codes. 
Also, I compute the dimension and bound the minimum distance of BCH codes under some restricted 
conditions. I derive impure quantum codes with remarkable minimum distance based on duadic codes. 
Also, I construct one family of quantum codes from project geometry codes. 

II) In part II, Chapters 7, 8, 9, 10, I study families of subsystem codes. I give various methods for 
subsystem code constructions, and, in addition, I derive families of subsystem codes based on BCH 
and RS codes. I generate tables of upper and lower bounds of subsystem code parameters. Finally, I 
trade the dimensions of subsystem code parameters and present a fair comparison between stabilizer 
and subsystem codes. 

HI) In part III, Chapters 11, 12, 13, 1 study quantum convolutional codes. I establish the stabilizer formalism 
of quantum convolutional codes using the direct limit, and I derive the generalized Singleton bound 
for quantum convolutional codes. Finally, I demonstrate two families of quantum convolutional codes 
derived from RS and BCH codes. 

IV) In part IV, I derive classes of quantum LDPC codes based on finite geometries, Latin squares and 
combinatorial objects. In addition, I construct families of LDPC codes derived from classical BCH 
codes and elements of cyclotomic cosets. 

V) In part V, Recently, the theory of quantum error control codes has been extended to include quantum 
codes over asymmetric quantum channels — qubit-flip and phase-shift errors may occur with different 
probabilities. I derive families of asymmetric quantum codes derived from classical BCH and RS codes 
over finite fields. In addition, I derive a generic method to derive asymmetric quantum cyclic codes. 



CHAPTER 2 



Background 



In this chapter I will present background material and terminologies of classical coding theory and quantum 
error control codes that are necessary to assist the reader in understanding the families of quantum codes 
presented in the following chapters. I will also cite previous work on quantum error control codes that is 
relevant to this work. 

The power of quantum computers comes from their ability to use quantum mechanical principles such as 
entanglement, interference, superposition, and measurement. These fascinating natural types of computers 
can solve certain problems exponentially faster than any known classical computers. Some well known 
examples of problems that can be solved are factorization of large primes and searching [137]. It was recently 
demonstrated that quantum key distribution schemes can be used to exchange private keys over public 
communication channels. 

Finding problems that can be solved by quantum computers is an interesting research subject, yet a 
difficult task. With the exception of a few problems, it is not well-known what types of problems that 
quantum computers can solve exponentially fast. However, there is no doubt about the usefulness and 
powerfulness of quantum computers. The most difficult problem associated with building quantum computers 
is isolating the noise. The term noise can be defined as quantum errors that are caused by decoherence from 
an environment. 

2.1 Classical Coding Theory 

Let q be a power of a prime p. Let denote a finite field with q elements. If g = p™ then 

F^H = {fix) e ¥,[x] I degfix) < m}, (2.1) 

where f{x) is a polynomial of max degree m, and ¥q[x] is a polynomial ring. If q ~ p, then the field has 
the integer elements {0, 1, ■■■,p~ 1} with the normal addition and multiplication operations module p. The 
addition and multiplication of elements in F,, where q = p™, are done by adding and multiplying in ¥p[x] 
module a known irreducible polynomial Pm{x) in Fp[a;] of degree m. A detailed survey on finite fields is 
reported in [88]. Let (3 be an element in F,. The smallest positive integer £ such that — 1 is called the 
order of /3. The order of a finite field is the number of elements on it, i.e., the cardinality of the field. If a G F, 
and the order oi a is q — 1, then a is called a primitive element in F^. In this case, all nonzero elements in 
¥q can be represented in g — 1 consecutive powers of a primitive element {1, a, , a*^"^, a*^ = a, a°° = 0}. 

Linear Codes. Let F^' be a vector space with dimension n and size q". A code C is a subspace of the vector 
space Fg over Fg. Every linear code is generated by a generator matrix G of size k x n. Let u be a vector in 
Fj, then 

C = {uG\ V mgFJ}, (2.2) 
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where G is a generator matrix of size k x n over Fg. The k basis vectors of G are the basis for the code C. 
The code C has q'^ codewords, the size of C. We can also generate a dual matrix H of size {n — k) x n from 
the matrix G such that 

GH^ = 0. (2.3) 

The n — k rows of H are also linearly independent. H is called the parity check matrix of C. We say that v 
is a valid codeword in C, if and only if, iJu"^ = 0. The parity check matrix H can also be used to define the 
G as 

C = {w e I iJv^ = 0}. (2.4) 
The dual of a code G is denoted by G^ and is defined by 

G^ = {w\we f;\ w.w = V i; e C}, (2.5) 

where w.d is the Euclidean inner product between two vectors in F^. If we assume that w = {wi, W2, ■ ■ ■ , Wn) 
and V = {vi,V2, ■ ■ ■ , ««) then w.v — Yl^=i '^iVi- We can say that w is orthogonal to v if their inner product 
vanishes, i.e., w.v = 0. If C C, then the code is called dual-containing. It means that all codewords in 
C"*- lie in G as well. Also, if all codewords in G lie in C-*", then the code G is called self-orthogonal, i.e., 
G C G-^. Self-orthogonal or dual-containing codes are of particular interest to our work because they are 
used to derive quantum codes. If C = C^, then the code is called self-dual. If [n, fc, d]g are parameters of a 
code C, then [n, n — k, d]q are parameters of the dual code C^. 

Minimum Distance and Hamming Weight. Some important criteria's of a code are the weight and 
minimum distance among its codewords. The weight of a codeword u in a code G is the number of nonzero 
positions (coordinates) in v. Let w and v be two codewords in a code C C F^. The Hamming distance 
between w and v is given by the number of positions in which w and v differ. It is weight of the difference 
codeword. 

d{w, v) —\ {i \ 1 < i < n, Wi Vi} \= wt{w — v). (2.6) 

The minimum distance of a code is the smallest distance between two different codewords in G. If C C P^, 
then the minimum distance d is the minimum weight of a nonzero codeword. 

The code performance can be measured by its rate, decoding and encoding complexity, and minimum 
distance. If the minimum distance is large, the code has a better ability to correct errors. Given a minimum 
distance d of a code C, the maximum number of errors t that can be corrected by C is t = [{d— 1)/2J , where 
the errors are distributed in random positions. The rate of a a code G is given by the ratio of its dimension 
to its length, i.e., k/n. The linear code parameters are given by [n,k,d]q or {n, q'' , d)q. 

Let Ai and Bi be the number of codewords in G and G-^ of weight i, respectively. The list of codewords 
Ai and Bi are called the weight distributions of G and C^, respectively. If C is a code with parameters 
[n, k, d] over ¥q, then it is a well-known fact that Aq + Ai + . . . + An = q^ ■ Furthermore, = 1 and 
Ai^A2^...^ Ad-i = 0. 

Error Corrections. Now assume a codeword u G C is sent over a noise communication channel. Let 
r = u -|- e be the received vector where e is the added noise. Then one can use the matrix H to perform error 
correction and detection capabilities of the code G . 

s = rH^ = {v + e)H^ = eH^ . (2.7) 

Based on the value of the syndrome s, one might be able to correct the received codeword r to the original 
codeword v, see [b8, 130] for further details. 

2.1.1 Bounds on the Code Parameters 

The relationship between the code parameters n,k,d and q has been well studied in order to compare the 
performance of codes. The minimum distance d is used to measure the ability of a code to correct errors. 
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Good error correcting codes are designed with a large minimum distance d and as large a number of codewords 
q'^ as possible, for a given length n and alphabet size q. So, it is crucial to establish upper and lower bounds 
on the code parameters. There have been many upper bounds on the code parameters such as Singleton, 
Hamming and sphere packing, and linear programming bounds. Also, there have been some lower bounds 
such as Gilbert- Varshamov bound. 

Singleton Bound and MDS Codes. Given a code C with parameters [n, k, d]q for d < n, the classical 
Singleton bound can be stated as 

qk < qn-d+l^ (2.8) 

If C is a linear code, then k < n — d + 1. Codes that attain the Singleton bound with equality are called 
Maximum Distance Separable (MDS) codes. MDS codes are also optimal codes. This class of codes is of 
particular interest because it has the maximum distance that can be achieved among all other codes with 
the same length, dimension, and alphabet size. No other codes of length n and size q'^ have larger minimum 
distances than MDS codes, with the same parameters. Also, it is known that the dual of a classical MDS 
code is also an MDS code. 

Hamming Bound and Perfect Codes. Given a code C with parameters [n, fc, d]q for d < n, the classical 
Hamming boimd can be stated as 

j2C')iq-^y<<i''-^ (2.9) 

where t = [{d — 1)/2J. Codes that attain Hamming bound with equality are classified as perfect codes. Let 
every codeword be represented by a sphere of radius t. The interpretation of Hamming bound, or sometimes 
called sphere packing bound, is that all codewords or the q'' spheres are pairwise disjoint in the space F^. 
For further details on bound on the classical code parameters, see for example [66, 130, 12(j]. 

2.1.2 Families of Codes 

There have been numerous families of classical codes. The most notable are the Bose-Chaudhuri-Hocquenghem 
(BCH), Reed-Solomon (RS), Reed-MuUer (RM), algebraic and projective geometry, and LDPC codes, see [nS, 
130, 126]. In this work I will describe some of these families. I will establish the conditions required for these 
codes to be self-orthogonal (or dual-containing) over finite fields, and, consequently, they can be used to 
derive quantum error control codes. 

2.2 Quantum Error Control Codes 

There has been a tremendous amount of research work in quantum error correcting codes during the last 
ten years. As such, the theory of stabilizer codes is well developed over binary and nonbinary fields. Many 
families of stabilizer codes are constructed based on BCH, RS, RM, finite geometry classical codes, where 
these families of codes are shown to be self-orthogonal (or dual-containing). Recently, the theory of stabilizer 
codes over finite fields has been extended to subsystem codes, where families of classical codes do not need to 
be self-orthogonal (or dual-containing). Also, new families and code constructions of subsystem codes have 
been investigated. I will summarize previous work related to my research in the following subsections. 

2.2.1 Quantum Block Codes 

The first quantum code was introduced by Shor as an impure quantum code with parameters [[9, 1,3]] 2 in 
a landmark paper in 1995 [ ]. The idea was to protect one qubit against bit flip and phase errors into 
nine qubits. Gottesman developed the theory and introduced quantum encoding circuits and fault-tolerant 
quantum computing [73, 69, 70]. Calderbank and Shor extended the theory to codes over F4 and introduced 
the CSS construction independently with Steane [34, 35, 177]. The quantum code Q can be defined as follows. 

Definition 1. A g-ary quantum code Q, denoted by [[n, fc, d]]q, is a q'' dimensional subspace of the Hilbert 
space C^" and can correct all errors up to [^y^J . 
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The code Q is able to encode k logical qubits into n physical qubits with a minimum distance of at least d 
between any two codewords. The Q can be constructed based on two classical codes Ci and C2 such that 
< Ci as follows. 

Fact 2 (CSS Code Construction). Let Ci and C2 denote two classical linear codes with parameters [n, ki, di]q 
and [n, k2, d2]q such that C2 < Ci. Then there exists a [[n,ki + fc2 — stabilizer code with minimum 

distance d = min{wt(c) | c G (Ci \ C^) U (C2 \ C^)} > min{c?i, 1^2}. 

Constructing a quantum code Q reduces to constructing a self-orthogonal (or dual-containing) classical code 
C defined over or ¥^2 as follows. 

Fact 3. // there exists an ¥q-linear [n,k,d]q classical code C containing its dual, C C, then there exists 
an [[n, 2k — n,> d]]q quantum stabilizer code that is pure to d. 

Fact 4. // there exists an ¥q2-linear [n,k,d]q2 classical code C such that C'^'^ C C, then there exists an 
[[n, 2fc — n, > d]]q quantum stabilizer code that is pure to d. 

There have been many famiHes of quantum codes based on binary classical codes, see [7G, 75, 78, 98, 179]. 
These classes of codes are derived from BCH, RS, algebraic geometry codes in addition to codes over graphs. 
The theory has been generalized to finite fields, see [20, 53, 54, 71, 99, 152, 158, 165]. Recently, new bounds, 
encoding circuits, and new families have been investigated, see [16, 17, 55, 83, 53, 124, 15n]. 

We will describe foundations of quantum block codes, as well as bounds and families of such codes in 
Chapters 3,4,5, 6. 

2.2.2 Subsystem Codes 

Subsystem codes are a generalization of the theory of quantum error correction and decoherence free sub- 
spaces. Such codes are an extension of quantum codes that are constructed based on self-orthogonal(or 
dual-containing) classical codes. The assumption is that a quantum code Q can be decomposed as a tensor 
product of two subsystems A and B, i.e. Q = A B. The source qubits are stored in the subsystem A and 
gauge qubits are stored in subsystem B. Therefore, subsystem codes are quantum error control codes where 
errors can be avoided as well as corrected. One can correct only errors on the subsystem A and completely 
neglect the errors affecting the subsystem B [23, 112]; for a group representation of operator quantum codes, 
see [102, 105, 149]. 

It has been shown in [14, 11] that subsystem codes over can be derived from classical additive codes 
over F, and ¥q2 without the needed for self-orthogonal or dual-containing conditions. An approach for code 
construction and bounds on the code parameters is shown in [14]. It has been claimed that subsystem codes 
seem to offer some attractive features for protection of quantum information and fault-tolerant quantum 
computing. They can be self-correcting codes [23]. Let H = C"^ " be the Hilbert space such that H = Q(BQ-^, 
where Q-^ is the orthogonal complement of Q. An [[n, k, r, d\]q subsystem code Q can be described as 

Definition 5. An [[n, k, r, d]]q subsystem code is a decomposition of the subspace Q into a tensor product 
of two vector spaces A and B such that Q — A(g) B. If dim A = k and dim B = r, then the code Q is able to 
detect all errors of weight less than d on subsystem A. 

Subsystem codes can be constructed from classical codes over ¥q and ¥q2 . 

Fact 6 (Euclidean Construction). If C is a k' -dimensional ¥q-linear code of length n that has a k" - 
dimensional subcode D — C H and k' + k" < n, then there exists an 

[[n, n-{k' + k"), k' - k", wt{D^ \ C)]]q 

subsystem code. 

Fact 7 (Hermitian Construction). Let C C ¥^2 be an ¥q2 -linear [n, k, d]q2 code such that D = C C] C^*^ is of 
dimension k' = dimf , D . Then there exists an 

[[n, n-k-k',k-k', wi{D^<- \ C)]]q 

subsystem code. 

We will describe foundations of subsystem codes; in addition to bounds and families of such codes in 
Chapters 7,8,9, 10. 
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2.2.3 Quantum Convolutional Codes 

Quantum convolutional codes (QCC's) seem to be useful for quantum communication because they have 
online encoders and decoders. One main property of quantum convolutional codes is the delay operator 
where the encoder has some memory set. However, quantum convolutional codes still have not been studied 
extensively. As pointed out earlier by several authors [ ], many interesting and unsolved questions remain 
regarding the properties and the usefulness of quantum convolutional codes. At this time, it is not known 
if quantum convolutional codes offer a decisive advantage over quantum block codes. We do not yet have a 
well-defined formalism of quantum convolutional codes. For example, the CSS construction, projector of a 
quantum convolutional code, and non-catastrophic encoders are not clearly defined for quantum convolutional 
codes. In other words, except for the work by OUivier [I'!!'], there are only some examples of quantum 
convolutional codes with 1/3, 1/4, and 1/n code rates. There have been examples of quantum convolutional 
codes in the literature; the most notable being are the ((5, 1,3)) code of OUivier and Tillich, the ((4, 1,3)) 
code of Almeida and Palazzo and the rate 1/3 codes of Forney and Guha. We present the most notable 
results as follows 

• OUivier and Tillich developed the stabilizer framework for quantum convolutional codes. They also ad- 
dressed the encoding and decoding aspects of quantum convolutional codes (cf. [141, 138, 139, 141]). Fur- 
thermore, they provided a maximum likelihood error estimation algorithm. They showed, as an example, 
a quantum convolutional code of rate k/n =1/5 that can correct only one error. 

• Forney and Guha constructed quantum convolutional codes with rate 1/3 [ ]. Also, together with Grassl, 
they derived rate {n — 2)/n quantum convolutional codes [59]. They gave tables of optimal rate 1/3 
quantum convolutional codes and they also constructed good quantum block codes obtained by tail-biting 
convolutional codes. 

• Grassl and Rotteler constructed quantum convolutional codes from product codes. They showed that 
starting with an arbitrary convolutional code and a self-orthogonal block code, a quantum convolutional 
code can be constructed, (cf. [^C]). Recently, Grassl and Rotteler [82] stated a general algorithm to 
construct quantum circuits for non-catastrophic encoders and encoder inverses for channels with memories. 
Unfortunately, the encoder they derived is for a subcode of the original code. 

Recall that one can construct convolutional stabilizer codes from self-orthogonal (or dual-containing) 
classical convolutional codes over (cf. [ , Corollary 6]) and Fq2 (see [1 "i. Theorem 5]) as stated in the 
following theorem. 

Fact 8. An [(n, fc, nm; r/, (ij^)]q convolutional stabilizer code exists if and only if there exists an {n,{n — 
fc)/2,m;i^)g convolutional code such that C < C'^ where the dimension of C'^ is given by {n + k)/2 and 
df^wt{C^\C). 

We will describe foundations of quantum convolutional codes, as well as bounds and families of such codes 
in Chapters 11,12,13. 

2.3 Fault Tolerant Quantum Computing 

Fault tolerant quantum computing is needed to speed up building quantum computers, if it has to happen 
in reality. The main purpose of fault tolerant quantum computing is to limit the number of errors that may 
occur in practical quantum computers. These errors may happen in the quantum error correcting operations 
or in the quantum circuits (i.e. gate operations). First, Shor presented the idea of applying fault tolerant 
quantum operations into quantum gates [109]. He applied it on controUed-not and phase gates, and showed 
how to perform fault tolerant operations even if an error happened in one single qubit. Some progress in 
fault tolerant quantum computing is included [151, 71, 180, 104]. Fault tolerant quantum computing seems 
to speed up the process of building quantum computers under a certain threshold value, known as threshold 
theorem [104, 180, 2]. 
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CHAPTER 3 



Fundamentals of Quantum Block 
Codes 



In this chapter I aim to provide an accessible introduction to the theory of quantum error-correcting codes 
over finite fields. Many definitions that are stated in this chapter will be also used through out the following 
parts. I will recall certain definitions concerning the error group and bounds of quantum code parameters 
from this chapter in the later chapters. Whenever, there is a definition or result that has not been mentioned 
in this chapter and will be used in the later chapters, I will state it accordingly if needed. I tried to keep the 
prerequisites to a minimum, though I assume that the reader has a minimal background in coding theory 
and quantum computing as introduced in the first two chapters or as shown in any introductory textbook 
such as [I 'm]. Also, I recommend the introductory textbooks [ ] and [f-^)()] as sources for the classical coding 
theory. I will cite most of the known previous work in quantum error control codes. Finally, part of this 
chapter has been done in a joint work with A. klappenecker and P. Sarvepalli and has been presented in [162]. 

This chapter focuses only on quantum block codes and it is organized as follows. Section 3.1 gives a 
brief overview of the main ideas of stabilizer codes while Section 3.2 reviews the relation between quantum 
stabilizer codes and classical codes. This connection makes it possible to reduce the study of quantum 
stabilizer codes to the study of self-orthogonal (or dual-containing) classical codes, though the definition 
of self-orthogonality is a little broader than the classical one. Further, it allows us to use all the tools of 
classical codes to derive bounds on the parameters of good quantum codes. Section 3.3 gives an overview of 
the important bounds for quantum codes. I will state quantum Singleton and Hamming bounds on quantum 
code parameters. I will prove quantum Hamming bound for impure quantum codes that can correct one 
or two errors. After that I will introduce many families of quantum error-correcting codes derived from 
self-orthogonal (or dual-containing) classical codes in the following chapters. 

Notations. The finite field with q elements is denoted by F^, where q — p™ and p is assumed to be a 
prime and m is an integer number. The trace function from ¥qr to ¥q is defined as tr^r^q^x) = X]i=o ' 
and we may omit the subscripts if is the prime field. The center of a group G is denoted by Z{G) and 
the centralizer of a subgroup S in G by Cg{S). We denote hy H < G the fact that iJ is a subgroup of G. 
The trace Tr(M) of a square matrix M — [m^] of size n x n is the sum of the diagonal elements of A/, i.e., 
Er=i^» = Tr(M). 

3.1 Stabilizer Codes 

In this chapter, we use g-ary quantum digits, shortly called qudits, as the basic unit of quantum information. 
The state of a qudit is a nonzero vector in the complex vector space C*. This vector space is equipped with 
an orthonormal basis whose elements are denoted by \x), where x is an element of the finite field Fg. The 
state of a system of n qudits is then a nonzero vector in C . In general, quantum codes are just nonzero 
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subspaces of . A quantum code that encodes k logical qudits of information into n physical qudits is 
denoted by [[n, fc, d]]q, where the subscript q indicates that the code is q-ary and d is the minimum distance of 
this code. More generally, an ((n, K, d))q quantum code is a if-dimensional subspace encoding log^ K qudits 
into n qudits and it can correct up to t = \_{d — 1)/2J errors. 

The first quantum error-correcting code was introduced by Shor in 1995 as an impure quantum code 
with parameters [[9, 1,3]] 2 [l*'"^]- The idea was to protect one qubit against bit flip and phase flip errors 
by encoding this qubit into nine qubits. Calderbank and Shor extended the theory and formalized the 
CSS construction independently with Steane [34, 35, 177]. Shortly, Gottesman introduced stabilizer codes, 
quantum concatenated codes and quantum encoding circuits [09, 70, 72]. 

As the quantum codes are subspaces, it seems natural to describe them by giving a basis for the subspace. 
However, in case of quantum codes this turns out to be an inconvenient description. For instance, consider 
a [[7, 1,3]]2 Steane code that encodes one logical qubit into seven physical qubits with a minimum distance 
three among its codewords. We can describe a basis for this code as follows 

|0l) = 10000000) + IIOIOIOI) + 10110011) + 11100110) 
+ 10001111) + 10111100) + llOllOlO) + IllOlOOl) , 

|1l) = 10000000) + IIOIOIOI) + 10110011) + luoouo) 
+ 10001111) + 10111100) + llOllOlO) + IllOlOOl) . 

An alternative description of the quantum error-correcting codes that will be discussed in this chapter relies 
on error operators that act on . Let E be an error operator. If we make the assumption that the 
errors are independent on each qudit, then each error operator E can be decomposed as E = Ei ■ ■ ■ ^ En- 
Furthermore, linearity of quantum mechanics allows us to consider only a discrete set of errors. The quantum 
error-correcting codes that we consider here can be described as the joint eigenspace of an abelian subgroup 
of error operators. The subgroup of error operators is called the stabilizer of the code (because it leaves each 
state in the code unaffected) and the code is called a stabilizer code. In the next four subsections, we will 
describe the error group and stabilizer codes in details. 

3.1.1 Error Bases 

Let P be a set of Pauli matrices given by {/, X, Z, Y}. In general, we can regard any error as being composed 
of an amplitude error (qubit flip) and a phase error (qubit shift). Let a and b be elements in F^. We can 
define unitary operators X{a) and Z{b) on that generalize the Pauli X and Z operators to the q-ary case; 
they are defined as 

X{a)\x) = \x + a), Z{b)\x) =Lj''^''^^\x) , (3.1) 

where tr denotes the trace operation from to ¥p, and uj = exp(27ri/p) is a primitive pth root of unity. 

Let £ = {X(a)Z{b) | a, 6 € F^} be the set of error operators. The error operators in £ form a basis of the 
set of complex q x q matrices as the trace Ti{A^B) — for distinct elements A, B of £. Further, we observe 
that 

X[a)Z{b) X{a')Z{b') = uo^'^'"'"^ X {a + a')Z{b + b'). (3.2) 

The error basis for n g-ary quantum systems can be obtained by tensoring the error basis for each system. 
Let a = (oi, . . . , a„) € F^. Let us denote by A'(a) = X{ai) ® ■ ■ ■ ® Ar(a„) and Z(a) = Z[ai) ® ■ ■ ■ ® Z{an) 
for the tensor products of n error operators. Then we have the following result whose proof follows from the 
definitions of X{a.) and Z{h). 

Lemma 9. The set £n = {X{a)Z{h) | a, b e F^'} is an error basis on the complex vector space C . 

3.1.2 Stabilizer Codes 

We will describe the quantum codes using a set of error bases. Consider the error group G„ defined as 

G„ = {c^=X(a)Z(b) I a, b e F^', c G Fp}. (3.3) 

Gn is simply a finite group of order pq^"" generated by the matrices in the error basis £„. Two elements Ei 
and E2 in Gn are abelian if E1E2 = E2E1. 
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Let S be the largest abelian subgroup of the error group G„ fixes every element in a quantum code Q. 
Then a stabilizer code Q is a non-zero subspace of C defined as 

f]{\i^)eC^" \E\i^)^m. (3.4) 
Ees 

Alternatively, Q is the joint +1 eigenspace of the stabilizer subgroup S. The notation of eigenspace and eigen 
value are described for example in [4^!]. A stabilizer code contains all joint eigenvectors of S with eigenvalue 
1, as equation (3.4) indicates. If the code is smaller and does not contain all the joint eigenvectors of S with 
eigenvalue 1, then it is not a stabilizer code for S. In other words, every error operator E in S fixes every 
codeword \ip) in Q. 

3.1.3 Stabilizer and Error Correction 

Now, we define the quantum code via its stabilizer 5, then we can be able to describe the performance of the 
code, that is, we should be able to tell how many errors it can error and how the error-correction is done, in 
addition to how many errors it can detect. 

The central idea of error detection is that a detectable error acting on Q should either act as a scalar 
multiplication on the code space (in which case the error did not affect the encoded information) or it should 
map the encoded state to the orthogonal complement of Q (so that one can set up a measurement to detect 
the error). Specifically, we say that Q is able to detect an error E in the unitary group U{q") if and only if 
the condition {ci\E\c2) — Xe{ci\c2) holds for all ci,C2 G Q, see [lOG]. 

We can show that a stabilizer code Q with stabilizer S can detect all errors in Gn that are scalar multiples 
of elements in S or that do not commute with some element of S, see Lemma 10. In particular, an undetectable 
error in G„ has to commute with all elements of the stabilizer. Let S < Gn and Cg„ (S) denote the centralizer 
of 5* in Gn, 

Cg„ (S) = {Ee Gn I EE' = E'E for aU E' e S}. (3.5) 

Let SZ{Gn) denote the group generated by S and the center Z[Gn)- We need the following characterization 
of detectable errors. 

Lemma 10. Suppose that S < Gn is the stabilizer group of a stabilizer code Q of dimension dimQ > 1. An 
error E in Gn is detectable by the quantum code Q if and only if either E is an element of SZ{Gn) or E 
does not belong to the centralizer Cg„ (S) . 

Proof. See [97, 20]; the interested reader can find a more general approach in [103, 101]. □ 

Since detectability of errors is closely associated to commutativity of error operators, we will derive the 
following condition on commuting elements in Gn- 

Lemma 11. Two elements E — 0!"^ X (a) Z (b) and E' — ll>^ X(a')Z(b') of the error group Gn satisfy the 
relation EE' = ^^^'-'(^■'^ ''^^ E' E. In particular, the elements E and E' commute if and only if the trace 
symplectic form tr(b • a' — b' • a) vanishes. 

Proof We can easily verify that EE' = Lj^'^^-'''^X{a + a')Z{h + h') and E'E = Lj^'^^'-'^^X{a + a')Z{h + h') 
using equation (3.2). Therefore, a;*''^'' '^ ~^ '^^E'E yields EE' , as claimed. □ 

Minimum Distance. We shall also define the minimum distance of a quantum code Q. In order to do so, 
we need to define the symplectic weight of a vector (a|&) in F^". The symplectic weight swt of a vector (a|b) 
in F^" is defined as 

swt((alb)) = \{k\ {ak,bk) ^ (0, 0)}]. (3.6) 

The weight wt{E) of an element E — lo'^Ei ® ■ ■ ■ ® En — w^X(a)Z(b) in the error group G„ is defined to be 
the number of nonidentity tensor components i.e., wt(i?) = \{Ei ^ /}| = swt((a]b)). 

A quantum code Q is said to have minimum distance d if and only if it can detect all errors in G„ of 
weight less than d, but cannot detect some error of weight d. We say that Q is an {{n,K,d))q code if and 
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Figure 3.1: The relationship between a quantum stabilizer code Q and a classical code C, where C C C . 



only if Q is a A'-dimensional subspace of that has minimum distance d. An [[n, q'' , d))q code is also 
called an [[n, k, d\]q code. One of these two notations will be used when needed. 

Due to the linearity of quantum mechanics, a quantum error-correcting code that can detect a set V of 
errors, can also detect all errors in the linear span of V. A code of minimum distance d can correct all errors 
of weight t = [{d — 1)/2J or less. 

Pure and Impure Codes. We say that a quantum code Q is pure to t if and only if its stabilizer group 
S does not contain non-scalar error operators of weight less than t. An [[n, k, d]]q quantum code is called 
pure if and only if it is pure to its minimum distance d. We will follow the same convention as in [34] , that 
an [[n, 0, code is pure. Impure codes are also referred to as degenerate codes. Degenerate codes are of 
interest because they have the potential for passive error-correction and they are difficult to construct as we 
will explain later. 



3.1.4 Encoding Quantum Codes 

The Stabilizer of a quantum code Q provides also a means for encoding quantum codes. The essential idea 
is to encode the information into the code space through a projector. For an ((n, K, d))q quantum code with 
stabilizer S, the projector P is defined as 

It can be checked that P is an orthogonal projector onto a vector space Q. Further, we have 

K = dimQ = TrP = q"/\S\. (3.8) 

The stabilizer allows us to derive encoded operators, so that we can operate directly on the encoded data 
instead of decoding and then operating on them. These operators are in Cg„{S). See [70] and [nH] for more 
details. 



3.2 Deriving Quantum Codes from Self-orthogonal Classical Codes 

In this section we show how stabilizer codes are related to classical codes (additive codes over ¥q or over 
Fq2). The central idea behind this relation is the fact insofar as the detectability of an error is concerned 
the phase information is irrelevant. This means we can factor out the phase defining a map from G„ onto 
F^" and study the images of S and Cg„{S)- We will denote a classical code C < F^' with K codewords and 
distance d by (n, K, d)q. If it is linear then we will also denote it by [n, fc, d]q where k = \ogq K. We define 
the Euclidean inner product of x, y G F^ a.s x ■ y — ^iUi- The dual code is the set of vectors in F^ 

orthogonal to C i.e., = {a; e F^ | a; • c = for all c € C}. For more details on classical codes see [ ] or 
[130]. 
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Constructing a quantum code Q reduces to constructing a self-orthogonal classical code C over and 
Fg, see [41, 40, 34, 71), 74, 179, 177, 1G8]. This relationship is shown in Fig. 3.1. 

Fact 12 (CSS Code Construction). Let Ci and C2 denote two classical linear codes with parameters [n, fci, di\q 
and [n,k2,d2]q such that C2 < Ci. Then there exists a [[n,ki + k2 — n,d]]q stabilizer code with minimum 
distance d = min{wt(c) | c G (Ci \ C2) U (C2 \ Ci)} > mm{di,d2}. 

Also, we can construct quantum codes from classical codes that contain their duals or are self-orthogonal 
as follows: 

Fact 13. IfC is a classical linear [n, k, d]q code containing its dual, < C, then there exists a [[n, 2k— n, d]]q 
stabilizer code. 

Fact 13 is particularly interesting because it helps us to construct a quantum code from a classical code and 
its dual. There have been many families of quantum codes based on binary classical codes, see [76, 75, 78, 98]. 
The theory has been generalized to finite fields, see [20, 53, 54, 71, 99, 152, 158, 165]. Recently, new bounds, 
encoding circuits, and new families have been investigated, see [16, 17, 55, 83, 53, 124, 158]. 



3.2.1 Codes over Fg. 

If we associate with an element uj"^ X (a) Z (h) of Gn an element (ajb) of F^", then the group SZ{Gn) is 
mapped to the additive code 

C = {(ajb) I Lu'X{a)Z{h) G SZ{Gn)} = 5Z(G„)/Z(G„). (3.9) 

To relate the images of the stabilizer and its centralizer, we need the notion of a trace-symplectic form of two 
vectors (ajb) and (a'jb') in F^", 

< (ajb) I (a'jb') tvq/p{h • a' - b' • a). (3.10) 

Let C'^' be the trace-symplectic dual of C defined as 

^{xe \<x\c >s^ for all c e C}. (3.11) 

The centralizer Cg„ (S) contains all elements of Gn that commute with each element of S; thus, by Lemma 11, 
Cg„ (S) is mapped onto the trace-symplectic dual code C^" of the code C, 

= {{a\h)\uj'X{a)Z{h) e Cg„(5)}. (3.12) 

The next theorem illustrates this connection between classical codes and stabilizer codes and generalizes 
the well-known connection to symplectic codes [.34, GO] of the binary case. 

Theorem 14. An {{n, K,d))q stabilizer code exists if and only if there exists an additive code C < F^" of 
size \G\ = q^-fK such that C < C-^' and swt(C^= \ G) ^ d if K > l( and swt(C-L= ) ^ d if K = 1). 

Proof See [20, 97] for the proof. □ 

In 1996, Calderbank and Shor [ ] and Steane [ I T ] introduced the following construction of quantum 
codes. It is perhaps the simplest method to build quantum codes via classical codes over F^. 

Lemma 15 (CSS Code Construction). Let Ci and C2 denote two classical linear codes with parameters 
[n, ki, di]q and [n, k2, d2]q such that < Ci. Then there exists a [[n,ki + k2 — n,d]]q stabilizer code with 
minimum distance d = min{wt(c) | c G (Ci \ C^) U (C2 \ C^)} that is pure to minjdi, c?2}- 

Proof Let C ^ G^ x < F^". Clearly C < C2 x Ci. If (ci | C2) G C and {c[ | 4) G C2 x Ci, then we 
observe that tr(c2 • c[ - c'2 ■ ci) = tr(0 - 0) = 0. Therefore, C < C2 x Ci < C-^^ . Since jCj = q^n-k.-k^^ 
|C-La I = g2n/|q ^ qk^+k2 ^ ^(j^ y. (^^|_ Therefore, G^' = C2 x Gi. By Theorem 14 there exists an ((n, K, d))q 
quantum code with K = 9"/|C| = q^i+^^-n ^ The claim about the minimum distance and purity of the code 
is obvious from the construction. □ 

Corollary 16. If G is a classical linear [n, fc, (i]^ code containing its dual, G^ < G, then there exists an 
[[n, 2fc — n, > d]\q stabilizer code that is pure to d. 

We will use Lemma 15 and Corollary 16 to derive many families of quantum error-correcting codes based 
on BCH, RS, duadic, and projective geometry codes as shown in the following sections. 



3.3. Bounds on Quantum Codes 



17 



3.2.2 Codes over Fg2. 

We can also extend the connection of the quantum codes and classical codes that are defined over ¥q2, 
especially as it allows us the use of codes over quadratic extension fields. The binary case was done in [34] 
and partial generalizations were done in [l-!2, Ui)] and [152]. We provide a slightly alternative generalization 
using a trace-alternating form. Let (/?, P'') denote a normal basis of Fq2 over F^. We define a trace-alternating 
form of two vectors v and w in F^a by 

/IN f V ■ W"^ — V'^ ■ W\ /o 1 ON 

{v\w)a = trg/p _ p2 ) ■ (3.13) 

The argument of the trace is an element of Fg as it is invariant under the Galois automorphism a; i— > x^. 

Let (f> : F^" F^a take (ajb) i— > /3a -f f3'^h. The map is isometric in the sense that the symplectic 
weight of (ajb) is equal to the Hamming weight of 0((a|b)). This map allows us to transform the trace- 
symplectic duality into trace-alternating duality. In particular it can be easily verified that if c, d G F^", then 
< c,\d > s — {(j){c), I, <j){d))a. li D < ¥^^2, then we denote its trace-alternating dual by I?^" = {v E ¥^2 \ 
{v\w)a = for all w G D}. Now Theorem 14 can be reformulated as: 

Theorem 17. An ({n, K,d))q stabilizer code exists if and only if there exists an additive subcode D of ¥^2 
of cardinality \D\ = q''/K such that D < D^-^ and wt(L>^° \D)^dif K >l (and wi{D^-) ^d if K = 1). 

Proof. From Theorem 14 we know that an ((n, K, d))q stabilizer code exists if and only if there exists a code 
C < F^" such that |C| = q'^/K, C < and swt(C-L» \ C) = d if K > 1 (and swt(C-^=) = d if K = 1). 

The theorem follows simply by applying the isometry 0. □ 

If we restrict our attention to linear codes over ¥q2 , then the hermitian form is more useful. The hermitian 
inner product of two vectors x and y in F^2 is given by x^ • y. From the definition of the trace-alternating 
form it is clear that if two vectors are orthogonal with respect to the hermitian form they are also orthogonal 
with respect to the trace-alternating form. Consequently, if I? < F^'2 , then D^'^ < Z)-*-" , where D-^'^ = {v G 
F^2 I w"^ ■ w = for all w £ D}. 

Therefore, any self-orthogonal code with respect to the hermitian inner product is self-orthogonal with 
respect to the trace-alternating form. In general, the two dual spaces D^*^ and Z?"*"" are not the same. 
However, if D happens to be Fg2 -linear, then the two dual spaces coincide. 

Corollary 18. // there exists an ¥q2-linear [n,k,d]q2 code D such that D^'^ < D, then there exists an 
[[n, 2k — n,> d\]q quantum code that is pure to d. 

Proof. Let q — p™, p prime. If _D is a fc-dimensional subspace of F^2, then is a (n — fc)-dimensional 
subspace of F^2. We can also view D as a 2mfc-dimensional subspace of F^""', and D-^" as a 2m{n — k)- 
dimensional subspace of F^™". Since D-^^ C D-"-" and the cardinalities of -D-""" and D-^*^ are the same, we 
can conclude that D^" — D^f^. The claim follows from Theorem 17. □ 

So it is sufficient to consider the hermitian form in case of Fg2 -linear codes. For additive codes (that are not 
linear) over ¥^2 we have to use the rather inconvenient trace-alternating form. Finally, using the hermitian 
construction, we will derive many families of quantum error-correcting codes in the following sections. 

3.3 Bounds on Quantum Codes 

We need some bounds on the achievable minimum distance of a quantum stabilizer code. Perhaps the 
simplest one is the Knill-LaFlamme bound, also called the quantum Singleton bound. The binary version of 
the quantum Singleton bound was first proved by Knill and Lafiamme in [106], see also [21, 19], and later 
generalized by Rains using weight enumerators in ['''^]. 



Theorem 19 (Quantum Singleton Bound). An {{n, K, d))q stabilizer code with K > 1 satisfies 

if<Q"-2d+2^ (3.14) 
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All binary and nonbinary quantum codes obeys the quantum Singleton bound as shown in Theorem 19. 
In addition all pure and impure quantum codes satisfies this bound as well. Codes which meet the quantum 
Singleton bound are called quantum MDS codes. In [Oi ], it was showed that these codes cannot be indefinitely 
long and the maximal length of a g-ary quantum MDS codes is upper bounded by 2q^ — 2. This could probably 
be tightened to + 2. It would be interesting to find quantum MDS codes of length greater than + 2 
since it would disprove the MDS Conjecture for classical codes [ ]. A related open question is regarding the 
construction of codes with lengths between q and ~1. At the moment there are no analytical methods for 
constructing a quantum MDS code of arbitrary length in this range (see [~~] for some numerical results). 

Another important bound for quantum codes is the quantum Hamming bound. The quantum Hamming 
bound states (see [69, 55]) that: 

Theorem 20 (Quantum Hamming Bound). Any pure {{n, d))q stabilizer code satisfies 

L(d-1)/2J 



E 

1=0 



(<?' - 1)' < q"/K. (3.15) 



While the quantum Singleton bound holds for all quantum codes, it is not known if the quantum Hamming 
bound is of equal applicability. So far no degenerate quantum code has been found that beats this bound. 
Gottesman showed that impure binary quantum codes cannot beat the quantum Hamming bound [ ] . 

In [21] Ashikhmin and Litsyn derived many bounds for quantum codes by extending a novel method 
originally introduced by Delsarte [47] for classical codes. Using this method they proved the binary versions 
of Theorem 20 and Theorem 19. We use this method to show that the Hamming bound holds for all double 
error-correcting quantum codes. See [""] for a similar result for single error-correcting codes. But first we 
need Theorem 21 and the Krawtchouk polynomial of degree j in the variable x, 

K,{x) = jzyiYie ly-' Q (":"). (3.16) 

Theorem 21. Let Q be an ((n, K,d))q stabilizer code of dimension K > I. Suppose that S is a nonempty 
subset of {0, . . . , d — 1} and N = {0, . . . ,n}. Let 

n 

/(x) = ^/,i^,(a;) (3.17) 



i=0 



be a polynomial satisfying the conditions 

i) fx>0 for all x in S , and /x > otherwise; 

ii) f{x) < for all x in N \ S . 
Then 

K<— max^^. (3.18) 
Proof See [97]. □ 

We demonstrate usefulness of the previous theorem by showing that the quantum Hamming bound holds 
for impure nonbinary codes when d = 5. 

Lemma 22 (Quantum Hamming Bound). An ((n, K,5))q stabilizer code with K > 1 satisfies 

K < <z"/(n(n - l)(g2 - 1)2/2 + niq^ - 1) + 1). (3.19) 



3.4. Perfect Quantum Codes 
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Proof. Let /(x) = E;=o fjKj{x), where U - (E^U Kj{x)f, 5 = {0, 1, . . . , 4} and N={0,1,. . . ,n}. Calcu- 



lating f{x) and fx g: 



;ives us 




/o 


= (l + n(q2_l)+n(n-l)(g2_ 1)2/2)2 


fl 


= J(n-lf(n-2)V-ir 


/2 


= i^in - 3)(n - 2)iq^ - if - (n - 2){q' - l)f 


/3 


= (1 - 2(n - 3)(g2 - 1) + -(n - 4)(n - 3)(g2 - 1)2)2 


/4 


- (3 - 3(n - 4)(g2 _ 1) + l(n - 5)(n - 4)(g2 - 1)2)2 


and, 


= g2n(i^„(g2_i)^ 1)^(^2 _ 1)2) 


/(O) 


/(I) 


= g2n(^2 ^ 2(„ - l)(g2 - 1) + (n - 1)(92 - 2)(q2 - 1)) 


/(2) 


= g2n(4 ^ 4(^2 _ 2) + (q2 _ 2)2 + 2{n - 2){q^ - 1)) 


/(3) 


= g2n(g_j_g(^2_2)) 


/(4) 





Clearly fx > ^ for all x e S* . Also, /(cc) < for all x € N\S since the binomial coefficients for negative 
values are zero. The Hamming bound is given by 

X<q-"max^ (3.20) 
ses fx 

So, there are four different comparisons where f{0)/fo > f{x)/fx, for x — 1,2,3,4. We find a lower bound 
for n that holds for all values of q. For n > 7 it follows that 

max{/(0)//o, /(l)//i, /(2)//2, /(3)//3, f{'i)/fi} = /(0)//o (3.21) 

□ 

The detailed prove of Lemma 22 can be found in [.^] . While the above method is a general method to prove 
Hamming bound for impure quantum codes, the number of terms increases with a large minimum distance. 
It becomes difficult to find the true bound using this method. However, one can derive more consequences 
from Theorem 21; see, for instance, [21, 19, 123, 134]. 



3.4 Perfect Quantum Codes 

A quantum code that meets the quantum Hamming bound with equality is known as a perfect quantum 
code. In fact the famous [[5, 1,3]]2 code [119] is one such. We will show that there do not exist any pure 
perfect quantum codes other than the ones mentioned in the following theorem. It is actually a very easy 
result and follows from known results on classical perfect codes, but we had not seen this result earlier in the 
literature. 

Theorem 23. There do not exist any pure perfect quantum codes with distance greater than 3. 

Proof. Assume that Q is a pure perfect quantum code with the parameters {{n, K,d))q. Since it meets the 
quantum Hamming bound we have 

L(d-1)/2J 

E r.)iq'-iy=qVK. (3.22) 

By Theorem 17 the associated classical code C is such that C^'^ < C < F^2 and has parameters (n, (/"if, d)^^. 
Its distance is d because the quantum code is pure. Now C obeys the classical Hamming bound (see [88, 
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Theorem 1.12.1] or any textbook on classical codes). Hence 



„2n 

ICI =g"JC < . (3.23) 

Substituting the value of K we see that this implies that C is a perfect classical code. But the only perfect 
classical codes with distance greater than 3 are the Golay codes and the repetition codes [s^]. The perfect 
Golay codes are over F2 and F3 not over a quadratic extension field as C is required to be. The repetition 
codes are of dimension 1 and cannot contain their duals as C is required to contain. Hence C cannot be 
anyone of them. Therefore, there are no pure quantum codes of distance greater than 3 that meet the 
quantum Hamming bound. □ 

Since it is not known if the quantum Hamming bound holds for nonbinary degenerate quantum codes 
with distance d > 5, it would be interesting to find degenerate quantum codes that either meet or beat the 
quantum Hamming bound [8]. This is obviously a challenging open research problem. 



CHAPTER 4 



Quantum BCH Codes 



An attractive feature of BCH codes is that one can infer valuable information from their design parameters 
(length, size of the finite field, and designed distance), such as bounds on the minimum distance and dimension 
of the code. In this chapter, we show that one can also deduce from the design parameters whether or not a 
primitive, narrow-sense BCH contains its Euclidean or Hermitian dual code. This information is invaluable in 
the construction of quantum BCH codes. A new proof is provided for the dimension of BCH codes with small 
designed distance, and simple bounds on the minimum distance of such codes and their duals are derived as 
a consequence. These results allow us to derive the parameters of two families of primitive quantum BCH 
codes as a function of their design parameters. This chapter is based on a joint work with P.K. Sarvepalli 
and A. Klappenecker and it was presented in [13, 16]. 

4.1 BCH Codes 

The Bose-Chaudhuri-Hocquenghem (BCH) codes [29, 30, 68, 85] are a well-studied class of cyclic codes that 
have found numerous applications in classical and more recently in quantum information processing. Recall 
that a cyclic code of length n over a finite field with q elements, and gcd(n, g) = 1, is called a BCH code 
with designed distance S if its generator polynomial is of the form 

gix) ='[[{x-a'), Z = CbU---UCb+s-2, 

zez 

where Cx — {xq'' mod n \ k E l^, k > 0} denotes the g-ary cyclotomic coset of x modulo n, a is a. primitive 
element of Fg™, and m = ord„(q) is the multiplicative order of q modulo n. Such a code is called primitive 
if n = q"^ — 1 , and narrow-sense if 6 = 1 . 

An attractive feature of a (narrow-sense) BCH code is that one can derive many structural properties of 
the code from the knowledge of the parameters n, q, and d alone. Perhaps the most well-known facts are 
that such a code has minimum distance d > S and dimension k > n — {5 — l)ord„(g). In this chapter, we 
will show that a necessary condition for a narrow-sense BCH code which contains its Euclidean dual code 
is that its designed distance S = 0{qn}^^). We also derive a sufficient condition for dual containing BCH 
codes. Moreover, if the codes are primitive, these conditions are same. These results allow us to derive 
families of quantum stabilizer codes. Along the way, we find new results concerning the minimum distance 
and dimension of classical BCH codes. 

To put our results into context, we give a brief overview of related work in quantum BCH codes. This 
chapter was motivated by problems concerning quantum BCH codes; specifically, our goal was to derive 
the parameters of the quantum codes as a function of the design parameters. Examples of certain binary 
quantum BCH codes have been given by many authors, see, for example, [34, 76, 7-5, 177]. Steane [17!)] gave 
a simple criterion to decide when a binary narrow-sense primitive BCH code contains its dual, given the 
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design distance and the length of the code. We generahze Steane's result in various ways, in particular, to 
narrow-sense (not necessarily primitive) BCH codes over arbitrary finite fields with respect to Euclidean and 
Hermitian duality. These results allow one to derive quantum BCH codes; however, it remains to determine 
the dimension, purity, and minimum distance of such quantum codes. 

The dimension of a classical BCH code can be bounded by many different standard methods, see [27, 
88, f30] and the references therein. An upper bound on the dimension was given by Shparlinski [f70], 
see also [I Ht, Chapter 17]. More recently, the dimension of primitive narrow-sense BCH codes of designed 
distance 6 < gT^/^l _|_ i ^ffg^g apparently determined by Yue and Hu [ ], according to reference [190]. We 
generalize their result and determine the dimension of narrow-sense BCH codes for a certain range of designed 
distances. As desired, this result allows us to explicitly obtain the dimension of the quantum codes without 
computation of cyclotomic cosets. 

The purity and minimum distance of a quantum BCH code depend on the minimum distance and dual 
distance of the associated classical code. In general, it is a difficult problem to determine the true mini- 
mum distance of BCH codes, see [ ]. A lower bound on the dual distance can be given by the Carlitz- 
Uchiyama-type bounds when the number of field elements is prime, see, for example, [ l page 280] and 
[183]. Many authors have determined the true minimum distance of BCH codes in special cases, see, for 
instance, [143], [190]. 

We refer to such a code as a BCH{n, q; S) code, and call Z the defining set of the code. The basic properties 
of these classical codes are discussed, for example, in the books [88, 93, 130]. 

Given a classical BCH code, we can use one of the following well-known constructions to derive a quantum 
stabilizer code: 

1. If there exists a classical linear [n, k, d]q code C such that C C, then there exists an [[n, 2k — n, > d]]q 
stabilizer code that is pure to d. If the minimum distance of C-^ exceeds d, then the quantum code is pure 
and has minimum distance d. 

2. If there exists a classical linear [n, k, d]q2 code D such that D^'* C D, then there exists an [[n, 2fc — n, > d]]q 
stabilizer code that is pure to d. If the minimum distance of D-^'^ exceeds d, then the quantum code is 
pure and has minimum distance d. 

The orthogonality relations are defined in the Notations at the end of this section. Examples of certain 
binary quantum BCH codes have been given in [34, 76, 77, 177]. 

Our goal is to derive the parameters of the quantum stabilizer code as a function of their design parameters 
n, q, and S of the associated primitive, narrow-sense BCH code C. This entails the following tasks: 

a) Determine the design parameters for which C C; 

b) determine the dimension of C; 

c) bound the minimum distance of C and C^. 

In case q is a perfect square, we would also like to answer the Hermitian versions of questions a) and c): 
a') Determine the design parameters for which C^'' C C; 
c') bound the minimum distance of C and C^''. 

To put our work into perspective, we sketch our results and give a brief overview of related work. 
Let C be a primitive, narrow-sense BCH code C of length n = — 1, m > 2, over with designed 
distance S. 

To answer question a), we prove in Theorem 34 that C C holds if and only if 5 < gr»"/2l _ i _ (^q ^ 
2)[m odd]. The significance of this result is that allows one to identify all BCH codes that can be used in 
the quantum code construction 1). Fortunately, this question can be answered now without computations. 
Steane proved in [179] the special case q — 2, which is easier to show, since in this case there is no difference 
between even and odd m. 

In Theorem 36, we answer question a') and show that C^'' C C if and only if 5 < q(™+[™ cvcn])/2 _ ^ — 
(q — 2)[rn even], where we assume that g is a perfect square. This result allows us to determine all primitive, 
narrow-sense BCH codes that can be used in construction 2). We are not aware of any prior work concerning 
the Hermitian case. 



4.2. Dimension and Minimum Distance 
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In the binary case, an answer to question b) was given by Mac Williams and Sloane [130, Chapter 9, 
Corollary 8]. Apparently, Yue and Hu answered question b) in the case of small designed distances [ ■ ']. We 
give a new proof of this result in Theorem 26 and show that the dimension k = n — m \{d — 1)(1 — for 
S in the range a consequence of our answer to b) , we obtain the dimensions of the 

quantum codes in constructions 1) and 2). 

Finding the true minimum distance of BCH codes is an open problem for which a complete answer seems 
out of reach, see [-ST]. As a simple consequence of our answer to b), we obtain better bounds on the minimum 
distance for some BCH codes, and we derive simple bounds on the (Hermitian) dual distance of BCH codes 
with small designed distance, which partly answers c) and c'). 

In Section 4.5, all these results are used to derive two families of quantum BCH codes. Impatient readers 
should now browse this section to get the bigger picture. Theorem 217 yields the result that one obtains 
using construction 1). Cohen, Encheva, and Litsyn derived in [-'-'2] the special case q = 2 oi our theorem by 
combining the results of Steane, and MacWilliams and Sloane that we have mentioned already. The result 
of construction 2) is given in Theorem 38. 

Notations. We denote the ring of integers by Z and a finite field with q elements by Fq. We follow Knuth 
and attribute to [P(fc)] the value 1 if the property P{k) of the integer k is true, and otherwise. For instance, 
we have [k even] = fc — 1 mod 2, but the left hand side seems more readable. If x and y are vectors in F^, 
then we write x _L y if and only if x ■ y ~ 0. Similarly, if x and y are vectors in F^2 , then we write x J-h y if 
and only if • y = 0. 



4.2 Dimension and Minimum Distance 

In this section we determine the dimension of primitive, narrow-sense BCH codes of length n with small 
designed distance. Furthermore, we derive bounds on the minimum distance of such codes and their duals. 

4.2.1 Dimension 

First, we make some simple observations about cyclotomic cosets that are essential in our proof. 

Lemma 24. If q be a power of a prime, m a positive integer and n = — 1, then all q-ary cyclotomic 
cosets Cx — {xq^ mod n | £ £ Z} with x in the range l<x < gr™/2i + 1 

have cardinality \Cx\ — rn. 

Proof. Seeking a contradiction, we assume that \Cx\ < rn. If m = 1, then Cx would have to be the empty 
set, which is impossible. If m > 1, then \Cx\ < rn implies that there must exist an integer j in the range 
1 < J < m such that j divides m and xq^ = x mod n. In other words, — 1 divides x{q^ — 1); hence, 
X > (g™ - l)/(<z^ - 1). 

If m is even, then j < m/2; thus, x > q"^/^ + 1. If m is odd, then j < m/3 and it follows that 
X > (q™ — l)/(q"'/^ ~ 1)1 a-iid it is easy to see that the latter term is larger than gT^/^l +1. In both cases 
this contradicts our assumption that 1 < a; < gT'^/^T; hence \Cx\ = m. □ 

Lemma 25. Let q be a power of a prime, m a positive integer, and n ~ — 1. Let x and y be integers in 
the range 1 < x,y < (7^^/21 _|_ i gyg/j ffiat x,y ^ mod q. If x ^ y, then the q-ary cosets of x and y modulo n 
are disjoint, i.e., Cx 7^ Cy. 

Proof. Seeking a contradiction, we assume that Cx — Cy. This assumption implies that y = xq^ mod n for 
some integer £ in the range 1 < £ < m. 

If xq^ < n, then xq^ = mod q; this contradicts our assumption y ^ mod q, so we must have xq^ > n. 
It follows from the range of x that £ must be at least [r7i/2j. 

li £ = [m/2j, then we cannot find an admissible x within the given range such that y = a;gL™/2j niod n. 
Indeed, it follows from the inequality a;(7L™/2j > ^ t]\a,t x > gT^/^l, so x must equal q^"^^^\ but that 
contradicts x ^ mod q. Therefore, £ must exceed lm/2\ . 

Let us write x as a q-ary number x = xo+xiq+- ■ •+x„j_ig'"^^, with < x; < q. Note that xo 7^ because 
X ^ mod q. If [m/2j < £ < m, then xq^ is congruent to yo — x,„_£+- • ■+x,n-iq^^^+xoq^+- ■ ■+Xm-i-iq™'^^ 
modulo n. We observe that yo > xoq^ > gr™/^!. Since y ^ mod q, it follows that y — yo > q^"^^"^^ + 1, 
contradicting the assumed range of y. □ 
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The previous two observations about cyclotomic cosets allow us to derive a closed form for the dimension 
of a primitive BCH code. This result generalizes binary case [l-iO, Corollary 9.8, page 263]. See also [182] 
which gives estimates on the dimension of BCH codes among other things. 

Theorem 26. A primitive, narrow-sense BCH code of length q™ — 1 over ¥q with designed distance 5 in the 
range 2 < 6 < gr™/2l _|_ i j^Q^g dimension 

fc = - 1 -mr((5- 1)(1 - (4.1) 

Proof. The defining set of the code is of the form Z — Ci U C2 • • • U Cg-i: a union of at most 5 — 1 consecutive 
cyclotomic cosets. However, when l<a;<(5 — lisa multiple of g, then C^/q = Cx- Therefore, the number 
of cosets is reduced by [(5 ~ l)/q\. By Lemma 25, ii x,y ^ Q mod q and x ^ y, then the cosets Cx and 
Cy are disjoint. Thus, Z is the union of {5 — 1) — [((5 — 1)/q\ = \[5 — 1)(1 — 1/g)] distinct cyclotomic 
cosets. By Lemma 24 all these cosets have cardinality m. Therefore, the degree of the generator polynomial 
is m\{5 — 1)(1 — 1/9)1, which proves our claim about the dimension of the code. □ 

If we exceed the range of the designed distance in the hypothesis of the previous theorem, then our 
dimension formula (4.1) is no longer valid, as our next example illustrates. 

Example 27. Consider a primitive, narrow-sense BCH code of length n = 4^ — 1 = 15 over F4. // we choose 
the designed distance (5 = 6 > 4^ + 1, then the resulting code has dimension k = 8, because the defining set Z 
is given by 

Z Ci U C2 U • • • U C5 = {1, 4} U {2, 8} U {3, 12} U {5}. 

The dimension formula (4-1) yields 4^ — 1 — 2[(6 — 1)(1 — 1/4)] ~ 7, so the formula does not extend beyond 
the range of designed distances given in Theorem 26. 



4.2.2 Distance Bounds 

The true minimum distance dmin of a primitive BCH code over with designed distance 5 is bounded by 
5 < dmin < 9^ — 1) see [130, p. 261]. If we apply the Farr bound (essentially the sphere packing bound) using 
the dimension given in Theorem 26, then we obtain: 

Corollary 28. // C is primitive, narrow-sense BCH code of length q™ — 1 over ¥q with designed distance 6 
in the range 2 < 6 < gT™/^! + 1 such that 

^ (1 ^)(q-i)»>g™r(5-i)(i-i/<?)i^ (4.2) 

then C has minimum distance d = S or 6 + 1; if, furthermore, 6 = mod q, then d = 6 + 1. 

Proof. Seeking a contradiction, we assume that the minimum distance d of the code satisfies d > 6 -\- 2. We 
know from Theorem 26 that the dimension of the code is fc = g"* — 1 — m[((5 — 1)(1 — 1/g)] . If we substitute 
this value of k into the sphere-packing bound 

L(d-1)/2J _ ^ 



then we obtain 



i=0 ^ ' i=0 ^ ' 

< ^mr(«-l)(l-l/9)l^ 

but this contradicts condition (4.2); hence, i5 < d < (5 + 1. 

If (5 = mod q, then the cyclotomic coset C5 is contained in the defining set Z of the code because 
C5 = C^iq. Thus, the BCH bound imphes that the minimum distance must be at least (5+1. □ 
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Corollary 29. A primitive, narrow sense BCH code of length n = — 1 over ¥q with designed distance S 
in the range 2 < S < q^"^/^'^ + 1 that satisfies 



i=0 



with /c = n-m[((5- 1)(1 - l/g)], (4.3) 



has minimum distance S. 

Proof. This follows from Theorem 26 and the Griesmer bound. □ 

Remark. The two competing requirements on the designed distance in the hypothesis of this corollary 
limit its applicability. We can use the same proof technique for codes with larger minimum distance if we 
replace k in equation (4.3) by a suitable bound. Generalizing our observations about cyclotomic cosets in 
the previous section could improve the trivial bound k > q™ — 1 — m{6 — 1). 

Example 30. Consider a primitive, narrow-sense BCH code of length n ~ 3^ — 1 over F^. Let 6 — A, 

it can be seen that ELo2' ^ ^ > 3l This means that condition (4-2) holds, then by Corollary 28, the 

code of length 8 and designed distance 5 — 4, has a minimum distance dmin = 4. To verify that, let us 
construct a primitive narrow-sense BCH code with length n — 8 and designed distance (5 = 4. We have 
k — — 1 — m\2t(l — l/q)~\ =4 and the generator polynomial is g{x) = 2 + x + -\- x'^ and the parity check 
polynomial is h{x) = \ -\- x + x 

So, hji{x) = 1 + 2x + x'^ + x^ + x'^ and the parity check matrix is 



H = 



1 1 1 2 1 \ 

1112 10 

1112 10 

V 1 1 1 2 1 y 



by subtracting columns 4 md 5 then add the result to columns 1 and 2, we found that the min distance for 
this matrix H is 4 that verifies our claim in Corollary 28 where 2t + 1 = mod 3. 

Lemma 31. Suppose that C is a primitive, narrow-sense BCH code of length n = (7™ — 1 over ¥q with 
designed distance 2 < 5 < (5niax ~ (jfT™/^! — 1 — {q — 2)[m odd]), then the dual distance d^ > (^max + 1- 

Proof. Let N = {0, 1, . . . , n — 1} and Zs be the defining set of C. We know that Zg^^^ D Zs D {1, . . . ,S — 1}. 
Therefore N \ Zg^^^ C N\Zs. Further, we know that ZnZ"*=0if2<5< (jmax from Lemma 33 and 
Theorem 34. Therefore, Z-^^^^ QN\ Zg^^^ CN\Zs. 

Let Ts be the defining set'of the dual code. Then T5 = {N \ Zg)^^ 3 ^<5,„ax- Moreover {0} G TV \ Zs and 
therefore Ts. Thus there are at 1 east 5max consecutive roots in Tg. Thus the dual distance d^ > (5niax + 1- CH 

Lemma 32. Suppose that C is a primitive, narrow-sense BCH code of length n — g^™ — 1 over Fq2 with 
designed distance 2 < S < (5max = "^^"^"l — 1 — (g^ — 2)[m even]), then the dual distance d^ > (5,nax + 1- 

Proof. The proof is analogous to the one of Lemma 31; just keep in mind that the defining set Zg is invariant 
under multiplication by q^ modulo n. □ 



4.3 Euclidean Dual Codes 

Recall that the Euclidean dual code of a code C C is given by = {y G F^' | a; • y = for all a; G C}. 
Steane showed in [179] that a primitive binary BCH code of length 2™ — 1 contains its dual if and only if its 
designed distance S satisfies 6 < 2r™/2l — 1. In this section we derive a similar condition for nonbinary BCH 
codes. 

Lemma 33. Suppose that gcd{n,q) = I. A cyclic code of length n over ¥q with defining set Z contains its 
Euclidean dual code if and only if Z O Z^^ = 0, where Z^^ denotes the set Z^^ = {— z mod n \ z E Z}. 



Proof. See, for instance, [00, Theorem 4.4.11]. 



□ 
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Theorem 34. A primitive, narrow-sense BCH code of length — 1, with m > 2, over the finite field ¥q 
contains its dual code if and only if its designed distance S satisfies 

S < (5n,ax = 9^"/'^ - 1 - (g - 2)[m odd]. 

Proof. Let n = q"^ — 1. The defining set Z of a primitive, narrow-sense BCH code C of designed distance 6 
is given by Z = Ci U C2 • ■ ■ U Cs-i, where Cx — {xq^ mod n \ j E Z}. 

1. We will show that the code C cannot contain its dual code if the designed distance S > (5niax. Seeking 
a contradiction, we assume that the defining set Z contains the set {!,..., s}, where s = ^max- By 
Lemma 33, it suffices to show that Z n Z^^ is not empty. If m is even, then s = g'"/^ — 1^ and Z~^ 
contains the element —sq"^^"^ = 5™/^ — 1 = s mod n, which means that Z n Z^^ ^ 0; contradiction. If m 
is odd, then s — q'^"^+'^y^ — g + 1, and the element given by — sg^™"^)/^ = — g(™-i)/2 _ i mod n 
is contained in Z^^. Since this element is less than s for m > 3, it is contained in Z, so Z Z^^ ^ 0; 
contradiction. Combining these two cases, we can conclude that 5 < gTi^/sl — l — (g — 2)[m is odd] for 
m > 2. 

2. For the converse, we prove that if 5 < Sn^x, then Z n Z^^ = 0, which implies C C by Lemma 33. It 
suffices to show that minC-^^ > (Jmax for any coset Cx in Z. Since 1 < a; < (^max < ^^"1/2! — 1^ we can 
write a; as a q-aiy integer of the form x — xq + xiq + ■ ■ • + Xm-iq"^"^ with < Xi < q, and Xi — for 

i > [m/2]. li y ^ n - X, then ?; = yo + yi9 H h ym-iq"^^^ = Yn^o^il ^ ^ ^ Xi)q\ Set y = minC_a;. 

We note that 1/ is a conjugate of y. Thus, the digits of y are obtained by cyclically shifting the digits of y. 

3a) First we consider the case when m is even. Then the q-aiy expansion of x has at least m/2 zero digits. 
Therefore, at least m/2 of the yi are equal to g — 1. Thus, y > J2ll^o~^il ^ l)?* = g'"/^ — 1 = (^max. 

3b) If m is odd, then as 1 < a; < g^^+^^/^-g+l, we have m > 1 and y = yo + yiq-] K(y(m-i)/2)g*^""^^^^ + 

{q — l)g(™+i)/2 -I- . . . -|- (g _ l)g™^i. For < j < (m — l)/2, we observe that xq^ < n, and since 
yq^ = -xq^ mod n,yq^ = n - xq^ > - 1 - (g('"+i)/2 - g)g(™-i)/2 = q{m.+i)/2 _ ^ > ^or 
(m + l)/2 < j < m — 1, we find that 

yq^ mod n = + • • • + S/(m-i)/2'?^'~^'"+^'/^ 

+ iq- + . . . + (g _ l)gJ-l 

+ ^og-' H h ym-j-ig'""\ 

>(^(m-l)/2_^)^j-(™-l)/2^-^^... 
+ V{m-l)/2, 

> (m+l)/2 _ , -, _ c 

where yo + ■ ■ ■ + j/(m-i)/2 > 1 because a; < g(™+i)/2 — g + 1. Hence y = inm{yq^ | J G Z} > Smax when m 
is odd. 

Therefore a primitive BCH code contains its dual if and only if (5 < (5max, for m > 2. □ 



4.4 Hermitian Dual Codes 

If the cardinality of the field is a perfect square, then we can define another type of orthogonality relation 
for codes. Recall that if the code C is a subspace of the vector space F^a , then its Hermitian dual code C^** 
is given by C^'' = {y E ¥^2 | y'' • x = for all x E C}, where y' — (y', . . . , yj^) denotes the conjugate of the 
vector y = (yi, . . . ,yn). The goal of this section is to establish when a primitive, narrow-sense BCH code 
contains its Hermitian dual code. 

Lemma 35. Assume that gcd{n,q) — I. A cyclic code of length n over ¥g2 with defining set Z contains its 
Hermitian dual code if and only if Z f] Z^'' — 0, where Z^'^' — {~qz mod n \ z E Z}. 
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Proof. Let = {0, 1, . . . , n — 1}. If g{z) = Yixezi^ ^ "^^) generator polynomial of a cyclic code C, 

then = Y[xeN\z('^ ~ a~'^^) is the generator polynomial of C^''. Thus, C^'* C C if and only if g{z) 

divides h''{z). The latter condition is equivalent to Z C {—qx \ x E N \ Z}, which can also be expressed as 

znz-« = 0. □ 

Theorem 36. A primitive, narrow-sense BCH code of length q^™ — 1 over Fg2, where m ^ 2, contains its 
Hermitian dual code if and only if its designed distance S satisfies 

S < <5max = 9"+'" ^''^l - 1 - (g' - 2)[m even]. 

Proof. Let n = g^™ — 1. Recall that the defining set Z of a primitive, narrow-sense BCH code C over the 
finite field ¥q2 with designed distance 5 is given hy Z — Ci U ■ ■ ■ U Cs-i with Cx — {xq^^ mod n\i e Z}. 

1. We will show that the code C cannot contain its Hermitian dual code if the designed distance 6 > (5max- 
Seeking a contradiction, we assume that the defining set Z contains {l,...,s}, where s = (^max- By 
Lemma 35, it suffices to show that Z fl Z~'^ is not empty. If m is odd, then s = — 1. Notice that 
n — gsg^^™"^^/^ = — 1 = s, which means that s £ Z D and this contradicts our assumption that 
this set is empty. If m is even, then s = — q'^ + 1. We note that n — qsq™~^ — — — 1 < 
s = g'^+i — q'2 -\- for m > 2. It follows that — q"'^^ — 1 e Z n Z"'', contradicting our assumption 
that this set is empty. Combining the two cases, we can conclude that s must be smaller than the value 

^m+[m even] _ ^ _ (^^2 _ 2)[^ gVCu] . 

2. For the converse, we show that it S < Jmax, then Z n Z^"^ = 0, which implies C^'' C C thanks to 
Lemma 35. It suffices to show that min{n — qCx} > <^max or, equivalently, that maxgCa, < n — (Jmax holds 
for 1 < a; < 5 — 1 . 

3. If m is odd, then the g-ary expansion of x is of the form x = xo + xiq + • • • + Xm-iq™'^^ , with Xi — 0, 
for m < i < 2m — 1 as x < — 1. So at least m of the Xi are equal to zero, which implies maxgC^; < 
g2™-l-(g™-l)-n-(5„,ax. 

4. Let m be even and qxq"^^ be the g^-ary conjugates ofqx. Since x < q"^^^ — q'^ + 1, x = xo + xiq + - ■ ■ + x,nq'^ 
and at least one of the x^<q-2. If < 2j < m - 2, then qxq'^^ < q{q"'+^ - q'^)q"'-'^ = g^™ - = 

+ 1 < n-(5max. If 2j = m, then gxg" = +a;™g + 0.g2 + . . • + O.g'" + a;og™+i • • • + .T™_2g2""^ 
We note that there occurs a consecutive string of m — 1 zeros and because one of the Xi < q — 2, we have 
qxq"^^ < n-q'^{q"^~^-l)-l < n-Smax- For m-|-2 < 2j < 2m-2, we see that qxq'^^ < n- q'^{q™~^ -1) < 

Thus we can conclude that the primitive BCH codes contain their Hermitian duals when 6 < — 
1 — (q^ — 2) [to even]. □ 



4.5 Families of Quantum BCH Codes 

We use the results of the previous sections to prove the existence of quantum stabilizer codes. We use the 
CSS construction as shown in the previous Chapter. 

Theorem 37. If q is a power of a prime, and m and S are integers such that m > 2 and 2 < S < (5„iax = 
gr»"/2l _ ]^ _ ^q, _ 2)[to odd\, then there exists a quantum stabilizer code Q with parameters 

[[5™ _ 1, _ 1 _ 2fn\{6 - 1)(1 - l/q)^ , dQ > 5]], 

that is pure up to 5. If BCl-L{n, q; S) has true minimum distance d, and d < (5max, then Q is a pure quantum 
code with minimum distance dq = d. 

Proof. Theorem 26 and 34 imply that there exists a classical BCH code with parameters [q™ — Ij^™ — 1 — 
m\{d — 1)(1 — l/g)] , > S]q which contains its dual code. An [n, k, d]q code that contains its dual code implies 
the existence of the quantum code with parameters [[n, 2k~ n,> d]]q by the CSS construction, see [77], [76]. 
By Lemma 31, the dual distance exceeds (5max; the statement about the purity and minimum distance is an 
immediate consequence. □ 
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Theorem 38. If q is a power of a prime, m is a positive integer, and S is an integer in the range 2 < S < 
^max = even] _ ^ _ ^^2 _ 2)[m evcn] , then there exists a quantum code Q with parameters 

that is pure up to S. If BCTi.{n, q^; S) has true minimum distance d, with d < (J^ax; then Q is a pure quantum 
code of minimum distance dq = d. 

Proof. It follows from Theorems 26 and 36 that there exists a primitive, narrow-sense [g^™ — l^q^"^ — 1 — 
m\{5 — 1)(1 — l/g^)],> S\q2 BCH code that contains its Hermitian dual code. Recall that if a classical 
[n, k, d\q2 code C exists that contains its Hermitian dual code, then there exists an [[n, 2k — n,> d]]q quantum 
code that is pure up to d, see [2n]; this proves our claim. By Lemma 32, the Hermitian dual distance exceeds 
(^maxj which implies the last statement of the claim. □ 



4.6 Quantum BCH from Self-orthogonal Product Codes 

It has been shown that product codes have a special interest because they have simple decoding algorithms 
and high bit rates. Furthermore, the Quantum BCH codes have much higher rates than the corresponding 
classical product codes. We apply an important result by Grassl [ , Theorem 5-8 ] in quantum block codes. 

Let Ci = [ui, hi, di\q be a linear code over finite field with generator matrix Gi for i € {1,2}. Then 
the linear code C — [nin2, kik2, did2]q is the product code of Ci C2 with generator matrix G = Gi G2, 
see [59, 80, 139]. 

Lemma 39. Let Ce C and Ch Q Cjj denote two codes which are self-orthogonal with respect to the 
Euclidean and Hermitian inner products, respectively. Also, Let C and D denote arbitrary linear codes over 
¥q and Vq2, respectively. Then C (8" C'e and D (g) C'h are Euclidean and Hermitian self-orthogonal codes, 
respectively. Furthermore, the minimum distance of the dual of the product code C ®Ce (D ® Ch) cannot 
exceed the minimum distance of the dual distance of C{D) and the dual distance of Ce(Ch)- 

Proof. See [SO, Theorem 7, Corollary 6 ]. □ 

We can explicitly determine dimension of the new self-orthogonal product code if we know dimension of 
the original two self-orthogonal codes. Therefore, we apply our previous result in dimension of BCH codes 
as shown in section 2 into Lemmas 40 and 41. 

Lemma 40. Let Ci he a primitive narrow-sense BCH code with length rij = g™' — 1 and designed distance 
2 < Si < (jr™i/2l _ X — (q — 2)[mi odd] over finite field ¥q for i £ {1, 2}. Then the product code 

Gi (g)G2^ [nin2,ki{n2 - k2),> Siwt{C^)]q 

is self-orthogonal and its Euclidean dual code is 

(Gi ® G^)^ = [nin2,nin2 - ki{n2 - fe), > min(wt(Gi^), S2)]q 

where fc, = g™' - 1 - ■m^\{6^ - 1)(1 - l/q)] and wt(G^) > S^. 

Proof. We know that ii 2 < 62 < g™/^ — 1, then G2 contains its Euclidean dual as shown in Theorem 34. From 
[80, Theorem 5] and Lemma 39, we conclude that the product code Gi (g) G^ is Euclidean self-orthogonal. □ 

Lemma 41. Let Gi = [n,k,d] be a primitive narrow-sense BCH code with length n — — 1 and designed 
distance 2<S < g'"/^ - 1 overWq . Furthermore, let C2 — [g— 1, 9 — <52, (S2] be a self-orthogonal Reed-Solomon 
code. Then the product code 

Gi ® G2 = [{q - l)n, kiq - 62), > S1S2U 

is self-orthogonal with parameters 

(Gi ® G2)^ = [{q - l)n, {q - l)n - k{q - 62), 
> min(wt(Gi^), g - d2)]q 

where k = q"' - 1 - m\i6i - 1)(1 - l/q)'] and wt{C^) > Si. 
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Proof. Since C2 is a self-orthogonal code, then the dual code has minimum distance q — 52 and dimension 
82 — 1. From [Mj, Theorem 5] and Lemma 39, we conclude that Ci (8) C2 is self-orthogonal. The dual distance 
of (Ci ® C2)''" comes from lemma 39 such that the dual distance of C2 is wt(C^) = q — 52- □ 

Now, we generalize the previous two lemmas to any arbitrary primitive BCH codes. 

Lemma 42. Let Ci he a primitive BCH code with length rii — g™' — 1 and designed distance 2 < 6i < 
q\m./2] _i_(g_2)[m, odd] over ¥q for i € {1, 2}. Then the product code 

Cl (g) C2 = [nin2, fcifc2, > SiS2]q 

is self-orthogonal with parameters 

Ci (g) C2 — [nin2,nin2 — kik2, > min{Si, 
where fc^ = g™ — 1 — mi\{6i — 1)(1 — l/q)~\ and 5^ > Si. 

Proof. Direct conclusion and similar proof as Lemma 40. □ 

Note: Lemmas 41 and 40 can be extended to Hermitian self-orthogonal codes. Finally, we can construct 
families of quantum error-correcting codes using Lemmas 40 and 41. 

Lemma 43. Let Ci be a primitive narrow-sense BCH code with length Ui — q™' — 1 and designed distance 
2 < Si < qr™i/2l — 1 — (q — 2)[mi odd] over ¥g for i G {1,2}. Furthermore, the product code 

Ci(g)C2 ^ [nin2,ki{n2 - k2),> (5i wt(C^)]q 

is self-orthogonal where ki = (7™* — 1 — mi\{Si — 1)(1 — l/i?)] and wt(Cj^) > Si. Then there exists a quantum 
error- correcting codes with parameters 

[[nin2,nin2 - 2ki{n2 - k2),dmin]]q- 
Proof. The proof is a direct consequence. □ 

4.7 Conclusions and Discussion 

We have investigated primitive, narrow-sense BCH codes in this chapter. A careful analysis of the cyclotomic 
cosets in the defining set of the code allowed us to derive a formula for the dimension of the code when the 
designed distance is small. We were able to characterize when primitive, narrow-sense BCH codes contain 
their Euclidean and Hermitian dual codes, and this allowed us to derive two series of quantum stabilizer 
codes. 

BCH are an interesting class of codes because one in advance can choose their design parameters. In 
the following chapters, we will show that BCH can be used to derived families of unit memory quantum 
convolutional codes as well as families of subsystem codes. 

It remains open problem to establish conditions when nonprimitive non-narrow sense BCH codes contain 
their Euclidean and Hermitian duals. In general, we do not know the exact minimum distance of a BCH 
code with given parameters. 

BCH codes can be used to derive LDPC codes. One can represent elements of the finite field as zero 
vectors of the code length except at positions of power of those elements. In [ ] we derive LDPC codes 
derived from nonprimitive BCH codes. This construction can be used to derive families of quantmn LDPC 
codes. 



CHAPTER 5 



Quantum Duadic Codes 



Good quantum codes, such as quantum MDS codes, are typically nondegenerate (pure), meaning that errors 
of small weight require active error-correction, which is — paradoxically — itself prone to errors. Decoherence 
free subspaces, on the other hand, do not require active error correction, but perform poorly in terms of 
minimum distance. In this chapter, examples of degenerate (impure) quantum codes are constructed that 
have better minimum distance than decoherence free subspaces and allow some errors of small weight that 
do not require active error correction. In particular, two new families of [[n, 1, > -v/n]]? degenerate quantum 
codes are derived from classical duadic codes. This chapter is based on a joint work with A. Klappenecker 
and P.K. Sarvepalli, see [12, 17]. I aim to provide enough details in classical duadic codes and degenerate 
quantum codes, so my results on quantum duadic codes will be readable. 

5.1 Introduction 

Suppose that g is a power of a prime p. Recall that an [[n, fc, d]]q quantum stabilizer code Q is a g'^'-dimensional 
subspace of C such that {u\E\u) — {v\E\v) holds for any error operator E of weight wt{E) < d and all 
\u) , \v) G Q, see [20, !)7] for details. The stabilizer code Q is called nondegenerate (or pure) if and only if 
= (7^"tr_E holds for all errors E of weight wt{E) < d where tr is the trace of E\ otherwise, Q is 
called degenerate. Recall that purity and nondegeneracy are equivalent notions in the case of stabilizer codes, 
see [34, 70]. 

In spite of the negative connotations of the term "degenerate", we will argue that degeneracy is an 
interesting and in some sense useful quality of a quantum code. Let us call an error nice if and only if it 
acts by scalar multiplication on the stabilizer code. Nice errors do not require any correction, which is a nice 
feature considering the fact that operational imprecisions of a quantum computer can introduce errors in a 
correction step (which is the main reason why elaborate fault-tolerant implementations are needed). 

If we assume a depolarizing channel, then errors of small weight are more likely to occur than errors of 
large weight. If the stabilizer code Q is nondegenerate, then all nice errors have weight d or larger, so the 
most probable errors all require (potentially hazardous) active error correction. On the other hand, if the 
stabilizer code is degenerate, then there exist nice errors of weight less than the minimum distance. Given 
these observations, it would be particularly interesting to find degenerate stabilizer codes with many nice 
errors of small weight. 

Although the first quantum error-correcting code by Shor was a degenerate [[9, 1,3]]2 stabilizer code, it 
turns out that most known quantum stabilizer code families provide pure codes. If one insists on a large 
minimum distance, then nondegeneracy seems more or less unavoidable (for example, quantum MDS codes 
are necessarily nondegenerate, see [1-^)2]). However, the fact that most known stabilizer codes do not have 
nice errors of small weight is the result of more pragmatic considerations. 

Let us illustrate this last remark with the CSS construction; similar points can be made for other stabilizer 
code constructions. Suppose we start with a classical self-orthogonal [n,k,d]q code C, i.e., C C C""-, then 
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one can obtain with the CSS construction an [[n,n — 2fc,(5]]g stabilizer code, where S wt(C^ \ C). Since 
we often do not know the weight distribution of the code C, the easiest way to obtain a stabilizer code with 
minimum distance at least Sq is to choose C such that its dual distance d'^ > Sq, as this ensures S > d,-^ > <5o. 
However, since C C C^, the side effect is that all nonscalar nice errors have a weight of at least d> > So- 

Our considerations above suggest a different approach. Since we would like to have nice errors of small 
weight, we start with a classical self-orthogonal code C that has a small minimum distance, but is chosen 
such that the vector of smallest Hamming weight in the difference set \ C is large. In general, it is of 
course difficult to find a good lower bound for the weights in this difference set. 

We illustrate this approach for degenerate quantum stabilizer codes that are derived from classical duadic 
codes. Recall that the duadic codes generalize the quadratic residue codes, see [122], [171], [172]. We show 
that one can still obtain a surprisingly large minimum distance, considering the fact we start with classical 
codes that are really bad. 

The chapter is organized as follows. In Section 5.2, we recall basic properties of duadic codes. In Sec- 
tion 5.3, we construct degenerate quantum stabilizer codes using the CSS construction. Finally, in Section 5.4, 
we obtain further quantum stabilizer codes using the Hermitian code construction. 

Notation Throughout this chapter, n denotes a positive odd integer. If a is an integer coprime to n, then 
we denote by ord„(a) the multiplicative order of a modulo n. We briefly write q = O mod n to express 
the fact that g is a quadratic residue modulo n. We write p"||n if and only if the integer n is divisible by 
but not by p°'~^^. If gcd(a,n) = 1, then the map /x^ : i i— > ai mod n denotes a permutation on the set 
{0, 1, . . . , n — 1}. An element c = (ci, . . . , c„) € is said to be even-like if J^i = 0, and odd-like otherwise. 
A code C C is said to be even-like if every codeword in C is even-like, and odd-like otherwise. 

5.2 Classical Duadic Codes 

In this section, we recall the definition and basic properties of duadic codes of length n over a finite field F^ 
such that gcd(n,q) — 1. For each choice, we will obtain a quartet of codes: two even-like cyclic codes and 
two odd-like cyclic codes. 

Let So, Si be the defining sets of two cyclic codes of length n over F, such that 

1. 5*0 n S*! = 0, 

2. 5*0 U S*! = 5 = {1, 2, . . . , n - 1}, and 

3. aSi mod n = S'(i+i mod 2) for some a coprime to n. 

In particular, each Si is a union of q-ary cyclotomic cosets modulo n. Since condition 3) implies |5'o| = 15*11, 
we have jS'il = {n— l)/2, whence n must be odd. The tuple {5*0, ^i, a} is called a splitting of n given by the 
permutation ^a- 

Let a be a primitive n-th root of unity over Fg. For i £ {0, 1}, the odd-like duadic code Di is a cyclic 
code of length n over Fg with defining set Si and generator polynomial 

g^ix)=Y[{x-an. (5.1) 

The even-like duadic code Ci is defined as the even-like subcode of Di; thus, it is a cyclic code with defining 
set Si U {0} and generator polynomial {x — l)gi{x). The dimension of a cyclic code Di of length n and 
generator polynomial gi{x) is given by 

ki = n- deg{gi(x)). (5.2) 

The dimension of Di is {n -\- l)/2 and that of Ci is [n — l)/2 respectively. Obviously Ci C Di. We have the 
following results on the classical duadic codes. 

Theorem 44. Duadic codes of length n over ¥q exist if and only if q is a quadratic residue modulo n, i.e., 
(7 = □ mod n. 

Proof. This is well-known, see for example, [172, Theorem 1] or [sn. Theorem 6.3.2, pages 220-221]. □ 
It is natural to ask when duadic codes are self-orthogonal, so that the CSS construction [.^4] can be used. 
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Lemma 45. Let Ci and Di he the even-like and odd-like duadic codes of length n over ¥q, where i G {0, 1}. 
Then 

i) Cl = Di if and only if -Si = ^(i+i mod 2) mod n. 
a) ~ ^(i+i mod 2) */ Only if —Si = Si mod n. 

Proof See [ss, Theorems 6.4.2-3] □ 

In other words, if the sphtting is given by fi-i, then the even-hke duadic codes Ci are self-orthogonal. If 
fj,-i fixes the set Si, then Ci C Cq — Di and Cq C = Dq. This naturally raises the question when 
gives a splitting of n and when it only fixes the codes. For some special cases of n this is known. When all 
prime factors of n = 11 -Pr'' such that pi = —1 mod 4, then we have the following result. 



Lemma 46. Let n — YIpT' prime factorization of an odd integer n, where each mi > and q is a 

quadratic residue modulo n. If every pi = —1 mod 4, then all the splitters of n are given by On the 

other hand if at least one pi = 1 mod 4, then there exists a splitting given by where a ^ — 1. 

Proof. See [ I 7:^, Theorem 8]. □ 



Although the weight distribution of a duadic code is not known in general, the following well-known fact 
gives partial information about the weights of odd-like codewords. 

Lemma 47 (Square Root Bound). Let Dq and Di be a pair of odd-like duadic codes of length n over ¥q. 
Then their minimum odd-like weights in both codes are same, say do- We have 

1. dl > n, 

2. d^ — do + ^ > n if the splitting is given by fi-i. 

Proof. See [ss. Theorem 6.5.2]. □ 



5.3 Quantum Duadic Codes — Euclidean Case 

In this section, we derive quantum stabilizer codes from classical duadic code using the well-known CSS 
construction. Recall that in the CSS construction, the existence of an [n, ki\q code C and an [n, k2]q code D 
such that C C D guarantees the existence of an [[n, ^2 — ki,d]]q quantum stabilizer code with minimum 
distance d = minwt{(7:> \ C) U {C^ \ D^)}. 

5.3.1 Basic Code Constructions 

Recall that two Fq-linear codes Ci and C2 are said to be equivalent if and only if there exists a monomial 
matrix M and automorphism 7 of such that C2 = C1M7, see [88, page 25]. We denote equivalence of 
codes by Ci ^ C2. For us it is relevant that equivalent codes have the same weight distribution, see [88, 
page 25]. 

The permutation map fXa '■ i ai mod n also defines an action on polynomials in ¥q[x] by f{x)fj,a = /(a;")- 
This induces an action on a cyclic code C over Fg by 

Cfla = {c(x)Ma 1 C{x) G C} = {c{x'') \ c{x) € C} . 

Lemma 48. Let C be a cyclic code of length n overFq with defining set T. //gcd(a,n) = 1, then the cyclic 
code Cfia has the defining set a~^T. Furthermore, we have C^a ~ C. 

Proof. This follows from the definitions, see also [''^ , Corollary 4.4.5] and [SS, page 141]. □ 

Theorem 49. Let n be a positive odd integer, and let q = D mod n. There exist quantum duadic codes with 
the parameters [[n,l,d]]q, where d^ > n. //ord„(q) is odd, then there also exist quantum duadic codes with 
minimum distance d^ — d -\- 1 > n. 
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Proof. Let N — {0, 1, . . . , n — 1}. li q = D mod n, then there exist duadic codes Ci C Di, for i g {0, 1}. 
Suppose that the defining set of Di is given by Si; thus, the defining set of the even-hke subcode Ci is 
given by Si U {0}. It foUows that has defining set —{N \ ({0} U Si)) ~ — S'(i+i ,„od 2)- Using Lemma 48, 

we obtain = mod 2)M-i ^(i+i mod 2) and D,/- = C(i+i mod 2)M-i ~ ^(i+i ,„od 2)- By the CSS 

construction, there exists an [[n, (n + l)/2 — (n — l)/2, d]]^ quantum stabihzer code with minimum distance 
d = min{wt((Di \ Ci) U {C:^ \ D:^))}. Since C^ ^ ^(i+i mod 2) and ~ C'ci+i mod 2)j the minimum distance 
d = min{wt((I?i \ U mod 2) \ mod 2))}: which is nothing but the minimum odd-hke weight of 

the duadic codes; hence d^ > n. If ord„(g) is odd, then gives a splitting of n[lGO, Lemma 5]. In this 
case, Lemma 47 implies that the odd-like weight d satisfies d'^ — d + 1 > n. □ 

In the binary case, it is possible to derive degenerate codes with similar parameters using topological 
constructions [32, 61, 100], but the codes do not appear to be equivalent to the construction given here. 

5.3.2 Degenerate Codes 

The next result proves the existence of degenerate duadic quantum stabilizer codes. This results shows that 
the classical duadic codes, such as Ci C Di, contain codewords of very small weight but their set difference 
Di \ d (and C^ \ D^) does not. First we need the following lemma, which shows the existence of duadic 
codes of low distance. 

It is always possible to construct a degenerate code of distance d and pure to 1 by the method discussed 
in [34, Theorem 6]; see also [')7, Lemma 69]. An alternative method to construct impure codes is to use 
concatenation [34, 70]. However such a construction assumes the existence of a pure code of distance d. 
The families we propose here are based on classical codes whose distance is low compared to their quantum 
distance. 

Theorem 50. Let p be an odd prime and q = D mod p. Let t — OTdp{q), and let z he such that p^\\q^ — 1. 
Then for m > 2z, there exist degenerate [[p™, l,rf]]g quantum codes pure to d' < p^ < d with d^ > p™ and 
d'^ -d+l>p"' ifp=-l mod 4. 

Proof. The existence of quantum stabilizer codes with these parameters follows from Theorems 49, which 
combined cover the two cases p = ±1 mod 4. 

But d' , the minimum distance of the underlying classical even-like duadic codes, is upper bounded by p^, 
see [172, Theorem 6]. For m > 22, the minimum distance d of the quantum code satisfies d > p™/^ > p^ > d'; 
thus, we have a degenerate quantum code. □ 

Our next goal is to find a generalization of Theorem 50 to lengths that are not necessarily prime powers. 

Lemma 51. Let n = Y[pT' ^'^ '"^'^ integer and g = □ modpi. If ti = ovdp.(ci) and p^'jjg** — 1, and 
nii > 2zi, then there exists a duadic code of length n and (even-like) minimum distance < minjpl^'} < ^/n. 

Proof. By Theorem 44 there exist duadic codes of lengths p™' and by [172, Theorem 6] their minimum 
distance, d[ is less than p^\ Since we know that the odd-like distance is > p™'^^ > Pi' , the minimum 
distance must be even-like. By [ , Theorem 4], there exists duadic codes of length n = YIpT' whose 
minimum distance d' < min{d^} < min{p|^*} < Y\p^^^^ = \fn. Since this is less than the mininmm odd- like 
distance, the minimum distance is even-like. □ 

Theorem 52. Let n — YIpT' ^'^ '^'^^ integer and g = □ mod pi. Let ti = ordp. {q), and let Zi he such that 
pT\W^ ^ 1- Then for rui > 2zi, there exists a degenerate [[n, l,d]]q quantum code pure to d' < min{p^'} < d 
with d^ > n. If Pi = —1 mod 4, then d^ — d + \ > n. 

Proof. From Lemma 51, we know that there exist duadic codes of length n and minimum (even-like) distance 
d' < min{p^'} < ^Jn. From Theorem 49, we know there exists a quantum duadic code with parameters 
[[n, 1, c?]], where d > ^/n > d' . Hence, the quantum code is degenerate. 

If Pi = —1 mod 4, then by [ , Theorem 8], the permutation gives a splitting for this code. Hence 
the odd-like distance must satisfy d^ — d + 1. □ 

Note that the previous result does not specify whether these duadic codes have a splitting given by 
Next we consider duadic codes when leaves them invariant. 
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Theorem 53. Let q = D mod n such n\{q'' + 1) for some b. Let ti — ordp. (g), and let Zi he such that 
p^'llg*' — 1. Then for rui > 2zj, there exists a degenerate [[n, l,d]]q quantum code pure to d' < min{p|^*} < d 
with d"^ >n. 

Proof. By Lemma 51, there exists a duadic code with minimum even-Uke distance d' < min{p^'}. But 
Theorem [172, Theorem 3.2.10] tells us that this code is fixed by Now Theorem 49 implies that we can 
construct a [[n, l,d > xAiJlg quantum code. As d' < min{p^'} < ^/n < d, we conclude that the quantum 
code is degenerate. □ 

Example 54. Let us consider binary quantum duadic codes of length 7™. Note that 2 is a quadratic residue 
modulo 7 as 4^ = 2 mod 7. Since ord7(2) = 3 and 1\\2^ — 1, we have z = 1. By Theorem 52 for m > 2 there 
exist quantum codes with the parameters [[7™, 1, (i]]2. As p — 7 = —1 mod 4 we have with d^ ~ d + 1 > 7"*. 
But, d' , the distance of the (even-like) duadic codes is upper bounded by p^ = 7. Hence these codes are pure 
to d' < 7. Actually, using the fact that the true distance of the even-like codes is A [ ] we can show that 
the quantum codes are pure to 4. 



5.4 Quantum Duadic Codes — Hermitian Case 

Recall that if there exists an Fg2-linear [n, k, d]g2 code C such that C^*^ C C, then there exists an [[n, 2k — n, > 
d^q quantum stabilizer code that is pure to d. In this section, we construct duadic quantum codes using this 
construction. Since = □ mod n, duadic codes exist over Fq2 for all n, when gcd(n,q^) = 1. In this case, 
the splitting ji-q plays a role analogous to that of in the previous section. 



5.4.1 Basic Code Constructions 

Lemma 55. Let d and Di respectively be the even-like and odd-like duadic codes over ¥q2, where i £ {0, 1}. 
Then C^^ = Di if and only if there is a q'^ -splitting of n given by H-q, that is, —qSi = S'(i4.i mod 2) mod n. 

Proo/. See [KiO, Theorem 4.4]. □ 

Lemma 56. Let n = J^p™' be an odd integer such that ord„((7) is odd. Then fi^q gives a splitting of n over 
Fg2 . In fact fi-i and fi^q give the same splitting. Otherwise fiq gives a splitting of n. 

Proof. Suppose that {5*0, Si, a] be a splitting. We know that each Si is an union of some g^-ary cyclotomic 
cosets, so q^Si = Si mod n. Now q°'-''^"'^'^^ St = Si mod n. If ord„(q) = 2fc + 1, then q^'^+'^Si = qSi = Si mod n; 
hence, fiq fixes each Si if the multiplicative order of q modulo n is odd. 

Notice that if ord„(g) is odd, then ord„(g^) is also odd. By [Kil, Lemma 5], we know that there exists a 
g^-splitting of n given by if and only if ord„((7^) is odd. Hence —Si = S^i^i ,„od 2) mod n. Since fiq fixes 
Si we have —qSi = ,„od 2) mod n; hence, gives a g^-splitting of n. 

Conversely, if gives a splitting of n, then —qSi = <S'(i+i mod 2) mod n. But as /ig fixes Si we have 
—Si = S'(i4-i mod 2) mod n. Therefore gives the same splitting as /i-g. If ord„(q) — 2k, then q'^ = —1. 
Hence, q'^Si mod n = —Si mod n = S(i^i mod 2) because gives a splitting of n. Because fiq2r fixes Si, 
k = 2w + 1 for some w. And q^'^^^Si mod n = qSi mod n — —Si — 5'(i_|_i mod 2)- Thus fiq gives a splitting of 
n. □ 



Theorem 57. Let n be an odd integer such that ord„(5) is odd. Then there exists an [[n,l,d]]q quantum 
code with d^ — d -\- 1 > n. 

Proof. By Lemma 56, there exist duadic codes Ci C Di with splitting given by /i_g and /i-i. This means 
that the Ci C C^'^ = Di by Lemma 55. Hence there exists an [[n,n — (n — l),c?]]g quantum code with 
d — wt{Di \ d). As /Lt_i gives a splitting, we have — d + 1 > n by Lemma 47. □ 



5.5. Conclusion 
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5.4.2 Degenerate Codes 

We construct a family of degenerate quantum codes that has a large minimum distance. 

Theorem 58. Let n — Y[pT' '^^ '"^'^ integer with ord„(g) odd and every pi = —1 mod 4. Let ti = 

ordp;(q^), and p^'\\q'^*^ — 1. Then for rui > 2zi, there exist degenerate quantum codes with parameters 
[[n, 1, d]]g pure to d' < mm{p^'} < d with d^ — d + I > n. 

Proof. From Lemma 51 we know that there exists an even-like duadic code with parameters [n, (n— 1)/2, d']q2 
and d' < min{p|^'}. 

Then by [ , Theorem 8], we know that for this code gives a splitting. By Lemma 56, fi-q also gives 
a splitting for this code. Hence by Theorem 57 this duadic code gives a quantum duadic code [[n, l,c?]]g, 
which is impure as d' < min{p^' } < ^/n < d. □ 

Finally, one can construct more quantum codes, for instance when ord„(q) is even, by finding the condi- 
tions under which gives a splitting of n. 

Lemma 59. Let n be an odd integer such that gcd(n, q^^^^ -|- 1) = 1 for some integer 1 < i < ordn{q)- Then 
gives a splitting of n over F^2 . 

Proof. Assume w.l.g. that there exists Cx G Sq such that —qCx mod n = Cx with x ^ Q. The proof is 
by contraction. Let Cx = {x^xq^jXq"^, ...,xq^^}, so, —qx = xq^^ mod n. Hence, —qx — xq^^ mod n = or 
—xq{l + mod n = 0. Since gcd{n,q'^^~^ + 1) = 1 = gcd{n,q) and x < n, then there is no integer 

solution for the last equation unless x = that contradicts out assumption. Therefore, —qCx mod n = Cy. 
consequently, the lemma holds. □ 

Lemma 60. Let n be an odd integer such that gcd(ji, q^^~^ + 1) = 1 for some integer 1 < i < ordn{q). Then 
there exists an [[n, 1, d]]q quantum code with d^ — d + 1 > n. 

Proof. Direct conclusion and similar proof as Lemma 57 by using Lemma 59 and Lemma 55. □ 

Now, we relax the condition in lemma 59 by studying the case where ord„(q) is even. 

Lemma 61. Let n — J^p™' be an odd integer such that every pi = 1 mod 4 or ord„(g) is even. If n\{q^^ + 1) 
for some integer b, Then fi^q gives a splitting of n over ¥q2 if ji-i fixes Si mod n. 

Proof. Let w.l.g. 1 e 5*0. We show that —q ^ So- Suppose —q G Sq, then —qSo = —q'^^^^So mod n ~ Sq = 
—So because fixes 5*0 and 1 e 5*0. So, q'^^^^So mod n = So but this is contradiction since ordn{q) is even. 
Now, we construct all elements of So and 5*1 such that So H Si ~ (j). 

Assume w.l.g. that there exist Cx € So and Cy E Si such that —qCx mod n = Cy. let Cx = 
{x,xq^,xq'^, ...,xq^^}, so, —qxq^^ mod n = y mod n or — a;g^*+^ mod n = y mod n. Since x E Cx E Sq 
and y G Cy G Si and consequently g^* = —1 mod n. Using Lemma [ , Lemma 3.2.6.] and the fact that 
ordn{q) is even then n\{q'^^ + 1) for some integer b. Indeed, /Lt_g gives a splitting of n over Fq2. □ 

5.5 Conclusion 

The motivation for this work was that many good quantum error-correcting codes, such as quantum MDS 
codes, are typically pure and thus require active corrective steps for all errors of small Hamming weight. 
At the other extreme are decoherence free subspaces (see [125, 192]) that do not require any active error 
correction at all, but perform poorly in terms of minimum distance. We pointed out that degenerate quantum 
codes can form a compromise, namely they can reach larger minimum distances while allowing at least some 
nice errors of low weight that do not require active error correction. 

We have constructed two families of quantum duadic codes with the parameters [[n, 1, > %/«]](; have 
shown that they contain large subclasses of degenerate quantum codes. Although these codes encode only 
one qubit, they are interesting because they demonstrate that there exist families of classical codes which 
can give rise to remarkable degenerate quantum codes. A more detailed study of the weight distribution of 
classical duadic codes can reveal which codes are particularly interesting for quantum error correction. We 
note that generalizations of duadic codes, such as triadic and polyadic codes, can be used to obtain degenerate 
quantum codes with higher rates. 



CHAPTER 6 



Quantum Projective Geometry Codes 



In this chapter I study projective geometry codes over finite fields. I settle down conditions when these 
codes contain their dual codes, C C. Consequently, using the CSS construction, I construct families of 
quantum error-correcting codes based on projective geometry codes. For further details see the joint paper 
with Klappenecker and Sarvepalli [ ]. 

Lachaud [IIG, ll-'i, 117] introduced projective Reed-MuUer codes (PRM) over finite fields in 1988. Pro- 
jective Reed-Muller (PRM) codes are a well-known class of projective geometry codes. I establish conditions 
when Projective Reed-Muller codes are self-orthogonal, hence I construct their corresponding quantum PRM 
codes. In addition, I study puncturing of these quantum PRM codes. 

Notation: Let us denote by Fq[Xo, Xi, ...,X„-^ the polynomial ring in Xq, Xi, Xm with coefficients in Fg. 
Furthermore, let Fq[Xo, Xi, X^]^ U {0} be the vector space of homogeneous polynomials in Xq, Xi, X^ 
with coefficients in Fg with degree v (cf. [22], [IIG], [l"-"")]). Let /""(F^) be the m-dimensional projective 
space over Fg. We evaluate the function /(Pi) at the projective points Pj £ P™(Fq). 



6.1 Projective Reed-Muller Codes 

A Generalized Reed-Muller code (CRM), C^{m,q) over Fg of order \ < v < m{q — 1) and length g™ is 
defined as 

C.{m,q) = {(/(0),/(pi),...,/(Pg™-i)|/(Xi,...,X™) 

eF,[Xi,...,X,„],deg(/)<i^}. (6.1) 

Lemma 62. Generalized Reed-Muller ( GRM) codes d, (m, q) over Fq of order 1 < v < (g — l)m have length 
n = <f^ , dimension 

y n / \ / -I \ 

t=0 j=0 V / V ■'^ / 

and minimum distance d(i^) = {q — s)^™^''^^, where v = [q — l)r + s , < s < (g — 1) and Q < r < m — 1. 
Proof. Sec for instance [17'')] and [22, chapter 16 ]. 

□ 

The Projective Reed-Muller code (PRM) over F^ of integer order v and length n = {q™^^ — \)/{q—l) is 
denoted by Vq{v,m) and defined as 

Vq{y,m) = {(/(Pi),...,/(P„)|/(Xo,...,X„OgF,[Xo,...,X„]^U{0}}, 

and P, e P'"(F,) for 1 < i < n. (6.3) 
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Lemma 63. The projective Reed-Muller code Vq(i',m), \ < v < m{q — 1), is an [n,k,d]q code with length 
n = ^ — — 1), dimension 

m+l 

M-)" >: y:(-i)-'i'"; ■■■] (6.4) 



t = ,. mod(g-l) ,- = \ J / \ JH / 



(q-1) j = 

and minimum distance d(i^) — {q ~ s)q"^^'''^^ where v r{ci — 1) + s + 1, < s < (7 — 1 

Proof. See [17"), Theorem 1]. □ 

The duals of PRM codes are also known and under some conditions they are also PRM codes. The 
following result gives more precise details. 

Lemma 64. Let — m{q — 1) — v, then the dual of Vq{v,m) is given by 

= i'^'^'^'uv^^ U '^o'^hS'";! (6-5) 
' [ b)pa,nf^{l,Vq[h' ,m)} v = mod (q — Ij ^ ' 

Proof See [17",, Theorem 2]. □ 

As mentioned earlier our main methods of constructing quantum codes are the CSS construction and the 
Hermitian construction. This requires us to identify nested families of codes and/or self-orthogonal codes. 
First we identify when the PRM codes are nested i.e., we find out when a PRM code contains other PRM 
codes as subcodes. 

Lemma 65. If V2 — vi + k{q — 1) , where k > 0, then Vqi^i^i, m) C Vq{h'2, ^) o,nd wt{Vq{h'2, "ti) \ 'Pq{i'i, m)) = 
wt{'Pq{v2,m)). 

Proof. In the finite field F^, we can replace any variable Xi by xj, hence every function in Fq[a;o, xi, . . . , Xm}\l 
is present in Fg[a::o, xi, . . . , . Hence Vq{i^i,m) C Vq{v2,m). Let vi ~ r{q - 1) + s + 1, then 

„2^{k + r){q - 1) + s + 1. By Lemma 63, = {q - s)q"'-'-'^ > (? - s)q"^-'-''-^ = d{v2)- This implies 

that there exists a vector of weight d{v2) in 'Pq{v2, m) and ^t{Vq{i'2, Tn) \ Vq{vi, m)) = 'wt{Vq{i'2, to)). □ 

Example 66. Let m = 1, q — 5, so n — (g™^^ — l)/(<? — 1) = 6. There are 6 points in this space 
{(0,1), (1,0), (1,1), (1,2), (1,3), (1,4)}. Therefore, inVz[l,l), there are two codewords {(011111), (101234)}. 
Also, in 'Pz{b, 1), there are 6 codewords 

{(011111), (001234), (001441), (001324), (001111), (101234)}, 

Hence, the 7^5(1, 1) C 7^5(5, 1) as shown in Lemma 65. Clearly, the code 7^5(1, 1) is not contained in 7^5(2, 1), 
7^5(3,1), or 7^5(4,1). 



6.2 Quantum Projective Reed-Muller Codes 

We now construct stabilizer codes using the CSS and hermitian constructions. 

Lemma 67. (CSS Construction) Suppose given two classical linear codes C — [n,kc,dc]q and E = 
[n, ks, dsjq over Fq with C Q E. Furthermore, let the minimum distance be d ^ inmwt{{E\C) U {C-^\E^)} 
if C C E and d — mmwt{C U C^} if C — E, then there exists a [[n,kE — kc,d]]q quantum code. 

Proof. See for instance [i()4. Lemma 2]. 

□ 

Theorem 68. Let n — (17™+^ — l)/{q — 1) and ^ < vi < V2 < m{q — 1) such that V2 — vi + l{q — 1) with 
vi ^ mod {q — 1). Then there exists an [[n,k{v2) — fc(t^i), min{(i(j/2), d(j^i")}]]ij stabilizer code, where the 
parameters k{u) and d{v) are given in Theorem 63. 



Proof. A direct application of the CSS construction in conjunction with Lemma 65. 



□ 
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We do not need to use two pairs of codes as we had seen in the previous two cases, we could use a single 
self-orthogonal code for constructing a quantum code. We will illustrate this idea by finding self-orthogonal 
PRM codes. 

Corollary 69. Let < ly < [m(g - 1)/2J and 2v = Q mod q~ I, then Vqiv^m) C Vqiv^m)^. If v 
mod 9 — 1 there exists an [[n, n — 2k{v), d(y^)\\q quantum code where n = (5™+^ — l)/{q — 1). 

Proof. We know that i^^ = m{q — 1) — v and if 'Pq{i',m) C 'Pq{i',m)^ , then < 1^^ and by Lemma 65 
j^^ = u + k{q — 1) for some fc > 0. It follows that < [m(g — 1)/2J and 21^= (to — k){q — 1), i.e., 
2iy = mod q — 1- The quantum code then follows from Theorem 68. □ 



Hermitian Constructions. We can study Projective Reed-MuUer codes generated over ¥q2. We show that 
if a code is contained in its hermitian dual code, then there is a corresponding quantum PRM code. We 
define the hermitian inner product of two codewords c and c' as 

n n 

(c|c') =XF = (6.6) 

i=l i=l 

We say the code C is hermitian self-orthogonal if C C C^'* such that (c | c') =0 for all codewords c S C 
and c' e C^" . 



Lemma 70. Let [n, fc, d]q2 be a linear PRM code such that 1 < v < m{q — 1) , then its contained in its 
hermitian dual (i.e. PCq-i{v^m) C PCq2(i/,m)'^^ ). 

Lemma 71. Given a PRM PCq2{v,m) that is contained in its hermitian dual code PCq2{v,m)^'^ with 
minimum distance d = min{wt{C'^'^\C)} , then there exists an [[n, n — 2k,d]]q quantum stabilizer code. 

Proof. See for instance [77, Corollary 2] and [ , Corollary 1]. □ 

Theorem 72. Let < < m{q — 1) and v ^ mod {q — 1), there exist a quantum PRM code [[n,n — 
2k{v),d{v^)]]q with n = (g2(™+i) _ i)/(g2 _ ^^jg^g 

t ^ 1/ mod (gr"' — 1) \-'~'^ / 
t < V 

and 

d{v^) = (q2 - s)g2(™-r-l) (6.8) 
such that V — 1 = r{q^ — \) + s, Q < s < q^ — 1 

Proof. We note that this code is constructed over Fg2, and wt{PCq2{i',m)^) — wt{PCq2{v^m)^'^) = d{v^). 
Applying Lemma 70 and Lemma 71, we construct a quantum code with parameters [[n, n—2k{v)^ d{v^)\\q. □ 



6.3 Puncturing Quantum Codes 

Finally we will briefly touch upon another important aspect of quantum code construction, which is the 
topic of shortening quantum codes. In the literature on quantum codes, there is not much distinction made 
between puncturing and shortening of quantum codes and often the two terms are used interchangeably. 
Obtaining a new quantum code from an existing one is more difficult task than in the classical case, the 
main reason being that the code must be so modified such that the resulting code is still self-orthogonal. 
Fortunately, however there exists a method due to Rains [i 7i2] that can solve this problem. 
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From Lemma 15 we know that with every quantum code constructed using the CSS construction, we can 
associate two classical codes, Ci and C2. Define C to be the direct product of and viz. C = x C^. 
Then we can associate a puncture code P{C) [ , Theorem 12] which is defined as 

P{C) - {{a^h}2^,\aeCt,beC^}^. (6.9) 

Surprisingly, P(C) provides information about the lengths to which we can puncture the quantum codes. If 
there exists a vector of nonzero weight r in P{C), then the corresponding quantum code can be punctured 
to a length r and minimum distance greater than or equal to distance of the parent code. 

Theorem 73. Let < i>i < 1^2 l£ m{q — 1) — 1 inhere V2 = i^i mod q — 1. Also let < fj, < 1^2 — 1^1 o-nd 
/i = 0mod(7— 1. IfVq{fJ-,m) has codeword of weight r , then there exists an [[r,> {k{i>2) — k{vi) — n + r),>d]]q 
quantum code, where n = (q™ — l)/{q— 1) d — mm{d{i'2),d{i'^)}. In particular, there exists a [[d{fi),> 
{k{v2) — k{vi) — n + d{p)), > d\]q quantum code. 

Proof. Let Ci = Vq(vi,m) with Vi as stated. Then by Theorem 68, an ^n,k{v2) — k{vi),d\]q quantum code 
Q exists where d = mm.{d{v2), d{v^)}. From equation (6.9) we find that P{C)^ — Vq{vi + V2 , w), so 

P{C) = Vq{m{q~l)-y^~vi,m), 

= Vq{v2-vum)- (6-10) 

By [8.3, Theorem 11], if there exists a vector of weight r in P{C), then there exists an [[r, fc', (i']]g quantum 
code, where k' > (fc(i^2) — k{iyi) — n + r) and distance d' > d. obtained by puncturing Q. Since P{C) = 
Pq{^2 — vi, Tn) 15 PqifJ'i "^) for all < < ^^2 " 1^1 and ^ = 1/2 — i^i = mod q — 1, the weight distributions 
of Vqi^n, m) give all the lengths to which Q can be punctured. Moreover P{C) will certainly contain vectors 
whose weight r — d{p), that is the minimum weight of PC{fi, m). Thus there exist punctured quantum codes 
with the parameters [[d{^), > {k{v2) — k{vi) — n + d{fi)), > d]]q. □ 

6.4 Conclusion and Discussion 

In this chapter, I drove families of quantum codes based on Projective Reed-Muller codes. In addition, I 
showed how to puncture the constructed quantum codes. 

One can study similar classes of Euclidean geometry codes to derive new families of quantum error- 
correcting codes. For example, cyclic Reed-Muller [ ' ], non-primitive Reed-Muller [ ' ], Euclidean geometry 
codes [i-:>t). Chapter 13],[__] over finite fields are obvious extensions of the families given in this chapter. 
In addition one can investigate polynomial codes to derive a family of quantum codes based on polynomial 
codes [94]. 



Part II 

Subsystem Codes 
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Subsystem Codes 



Subsystem codes are a relatively new construction of quantum error control codes. Subsystem codes combine 
the features of decoherence free subspaces, noiseless subsystems, and quantum error-correcting codes. Such 
codes promise to offer appealing features, such as simple syndrome calculation and a wide variety of easily 
implementable fault-tolerant operations. 

In this chapter I give an introduction to subsystem codes. I will show how to derive subsystem codes from 
classical codes that are not necessarily self-orthogonal (or dual-containing). I will establish the relationships 
between stabilizer and subsystem codes. Some of this work with further details was appeared in [14, 11, 10] 
that is based on a joint work with A. Klappenecker and P. Sarvepalli. 

7.1 Introduction 

Subsystem codes are a relatively new construction of quantum codes. Subsystem codes generalize the known 
constructions of active and passive quantum error control codes such as decoherence free subspaces, noiseless 
subsystems, and quantum stabilizer codes, see [1!J2, 12-5, 9G, l(i7]. The stabilizer formalism of subsystem 
codes can be found in [105, 112, 149]. Errors in subsystem codes not only can be corrected but also can 
be avoided. Subsystem codes promise to be useful for fault-tolerant quantum computation in comparison to 
stabihzer codes [2, 14]. 

The main purpose of subsystem codes is to simplify the known quantum codes specifically the stabilizer 
codes. The subsystem codes do not need the underlying classical codes to be self-orthogonal or dual containing 
as in the case of stabilizer codes. Furthermore, errors can be isolated into two subsystems. Therefore, they 
have less syndrome measurement and more efficient error corrections [2.'-!, 149]. We will show that many 
subsystem codes can be constructed easily from existing stabilizer codes that are available in [31, 34]. 

An {{n, K, R, d))q subsystem code is a i4'i?-dimensional subspace Q of C that is decomposed into a 
tensor product Q — B oi sl X-dimensional vector space A and an i?-dimensional vector space B such 
that all errors of weight less than d can be detected by A. The vector spaces A and B are respectively called 
the subsystem A and the co-subsystem B. For some background on subsystem codes, see for instance [14, 
102, 149]. 

Assume that we have a [[n, k, r, d]]q subsystem code Q that decomposes as Q — A(E) B. In general Q is 
a subspace in the ^"-dimensional Hilbert space, , the information is stored on the correlations between 
all the ri-qudits, and there is not necessarily a one to one correspondence between the logical qudits and 
the physical qudits. Similarly for the gauge qudits, i.e., co-subsystem B. But if there is a one to one 
correspondence between the physical qudits and the gauge qudits, say r' of them, then the subsystem A 
is essentially in the Hilbert space of n — r' qudits, and we can discard the r' gauge qudits to obtain a 
[[n — r',k,r—r', d]]q subsystem code. We call those gauge qudits trivial gauge qudits. If all the gauge qudits 
can be identified with physical qudits, then we call such a subsystem code a trivial subsystem code. Such 
codes are no different from padding a stabilizer code with random qudits; nothing is to be gained from them. 
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Further, we will assume that a nontrivial subsystem code has no trivial gauge qudits. We aim in this study 
to judge whether stabilizer codes are superior to subsystem codes. 

There have been many families of stabilizer codes derived from classical self-orthogonal codes over and 
F^2, see for example [13, 97, 34]. But in the other hand, there are not many families of subsystem codes 
constructed yet, except [24]. This is because the theory is recently developed and it is a challenging task to 
find two classical codes such that dual of their intersection can lead to a subsystem code. Subsystem codes 
exist given particular stabilizer codes over F,. 

Notation: Let g be a power of a prime integer p. For vectors x,y in F^, we define the Euclidean inner 
product {x\y) = Y.7=i x^y^ and the Euclidean dual of C C F^ as C-^ = {x G F^ | {x\y) = for all y G C}. We 
also define the hermitian inner product for vectors x, y in F^a as {x\y)h — X]i=i ^^.Vi ^'^^ hermitian dual 
of C C F^2 as C-^'^ — {x & F^2 | {x\y)h = for all y G C}. The trace-symplectic product of two elements 
u = (a|6), u = {a'\b') in F^" is defined as {u\v)s = tYq/p[a' ■ b — a - b'), where x ■ y is the usual Euclidean inner 
product. The trace-symplectic dual of a code C C F^" is defined as = {w G F^" | {v\w)s = for all w G 
C}. 

7.2 Subsystem Codes 

Let Ti be the Hilbert space Ti — C = ® C ... C^. Let \x) be the vectors of orthonormal basis of C, 
where the labels x are elements in the finite field F^. For a, 6 G Fg, we define the unitary operators X{a) and 
Z{b) in as follows: 

X{a)\x) ^\x + a) , Z{b)\x) =cj''^''^'^\x) , (7.1) 

where uj = exp(27ri/p) is a primitive pth root of unity and tr is the trace operation from Fq to Fp 

Now, we can define the set of error operators E — {X{a)Z{b) \a,b E ¥q} in an error group. Let a = 
(ai, . . . , On) G F^ and b = (6i, . . . , 6„) G F^'. Let us denote by 

X(a) = X{ai) (g) ■■ ■ (g> X(a„) and , 

Z(b) = Z{bi)® ••• ®Z{b„) 

the tensor products of n error operators. The set E = {X{a.)Z{h) | a, b G F^'} form an error basis on C^". 
We can define the error group G as follows 

G = {cj"E = tj"X(a)Z(b) I a, b G F^, c G Fp}. (7.2) 

Let Q be a quantum code such that Ti. = Q ® Q^, where is the orthogonal complement of Q. We can 
define the subsystem code QA(g B, see Fig. 18.1, as follows 
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Definition 74. An [[n, k, r, d]]q subsystem code is a decomposition of the subspace Q into a tensor product 
of two vector spaces A and B sucli that Q = B, where dim A = k and dim B = r. The code Q is able to 
detect all errors of weight less than d on subsystem A. 

Subsystem codes can be constructed from the classical codes over and F^2. Such codes do not need 
the classical codes to be self-orthogonal (or dual-containing) as shown in the following theorem. 

Theorem 75. Let C he a classical additive subcode of F^" such that C ^ {0} and let D denote its subcode 
D = C n C^" . If X — \C\ and y = \D\, then there exists a subsystem code Q — A ® B such that 
i) dimA = g"/(a;j/)i/2, 
ii) A\mB — {x/yY^"^. 

The minimum distance of subsystem A is given by 

(a) d = swt((C + C^')-C)^ swt(D-L= - C) if D^^ ^ C; 

(b) d = swtp-^O ifD^' = C- 

Thus, the subsystem A can detect all errors in E of weight less than d, and can correct all errors in E of 
weight < [(rf - 1)/2J. 

Many subsystem codes can be derived based on the previous theorem as we will show in the next chapters. 

7.3 Bounds on Pure Subsystem Code Parameters 

We want to investigate some bounds and limitations on subsystem codes that can be constructed with the 
help of Theorem 75. It will be convenient to introduce first some standard notations for the parameters of 
the codes. 

All stabilizer codes obey the quantum Singleton bound and all pure stabilizer codes also saturate the 
quantum Hamming bound. The conjecture where impure stabilizer codes obey or disobey quantum Hamming 
bound has been an open question. We will show that also pure subsystem codes obey Singleton and Hamming 
bounds. 

Let X be an additive subcode of F^" and Y — XOX-^" . By Theorem 75, we can obtain an ((n, K, K' , d))q 
subsystem code Q from X that has minimum distance d = swt(y^= — X). The set difference involved in 
the definition of the minimum distance make it harder to compute the minimum distance. Therefore, we 
introduce pure codes that are easier to analyze. Let dp denote the minimum distance of the code X, that is, 
dp — swt{X). Then we say that the associated subsystem code is pure to dp. Furthermore, we call Q a pure 
code if dp > d, and an impure code otherwise. 

Lemma 76. // Theorem 75 allows one to construct a pure ((n, K, K' , d))q subsystem code Q, then there 
exists a pure {{n,KK' ,d))q stabilizer code. 

Proof. Let X be a classical additive subcode of F^" that defines Q, and lei Y = X C\ X^' . Furthermore, 
Theorem 75 implies that KK' = (7"/|y|. Since Y C Y^', there exists an {(n,q"' /\Y\,d')q stabilizer code 
with minimum distance d' — wt(F^= — Y). The purity of Q implies that swt(y-'-= — X) — swt(y^=) = d. 
As F C X, it follows that d' — swt(y^^" — Y) = swt(y^') = d\ hence, there exists a pure {{n, KK' ,d))q 
stabihzer code. □ 

In Chapter 8, we generalize Lemma 76 and also derive the converse. 
7.3.1 Quantum Singleton Bound 

The quantum Singleton bound for pure subsystem codes, not necessarily linear, can be stated as follows. 

Theorem 77 (Singleton Bound.). Any pure {{n, K, K' , d))q subsystem code that is constructed using Theo- 
rem 75 satisfies the bound 



Proof. By Lemma 76, there exists a pure {{n, KK' ,d))q stabilizer code. By the quantum Singleton bound, 



KK' < q' 



(7.3) 



we have KK' < q 



,n-2d+2 



□ 
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Corollary 78. A pure [[n, k, r, d]]q code satisfies k + r<n — 2d + 2. 

Our next goal is to show that in fact all ((n, if ', c?))g subsystem codes are pure. Note that 

((n, g"-2!i+2^ ^-j-j ^]^g parameters of a quantum MDS code. An [[n, k, r, d]]q subsystem code derived from 
an Fg-linear classical code C < F^" satisfies the Singleton bound k + r<n — 2d+2. A subsystem code 
attaining the Singleton bound with equality is called an MDS subsystem code. 

An important consequence of the previous theorems is the following simple observation which yields an 
easy construction of subsystem codes that are optimal among the Fg-linear Clifford subsystem codes. 

Theorem 79. Any [[n, n ~ 2d + 2,r, d]]q subsystem code is pure. 

Proof. Assume that there exists an [[n,n — 2c? + 2,r,d]]q subsystem code that is impure. Then there exists 
an (n, (7""*=+'")^2 classical code X C F^2 and an (n, q"-~^^'')q2 code Y = Xf] X-"-" such that fc = n-2d+2 = 
dimF_^2 — dimf^s ^ and wt(y^'' \X) = d and wt(X) — d' < d. Then it is possible to construct a stabilizer 
code with distance > d that is impure to d' by considering a self-orthogonal subcode XOX^" C A"' C A" that 
includes a vector of weight d' such that \X'\ = g""*^. Such a subcode will always exist. Then the resulting 
stabilizer code is of parameters [[n, n — 2d + 2, d\]q and is impure. But we know that all quantum MDS codes 
are pure [152], see also [97, Corollary 60]. This implies that d' > d contradicting that d' < d. Hence every 
[[n, n — 2d + 2,r, d]]q subsystem code is pure. □ 

A very straightforward consequence of Theorems 77 and 79 is the following corollary: 

Lemma 80. There exists no [[n, n — 2d + 2,r, d\]q .subsystem code with r > 0. 

This still leaves a room for subsystem codes being superior to quantum block codes. For instance if a 
[[11, 1, 8, 3]]2 code exists, then it is equivalent to a [[3, 1,3]]2 code which is superior to [[5,1,3]]2 code. In 
addition, there does not exist an [[11.9,3]]2 stabilizer code. 

Theorem 81. If there exists an ¥q-linear [[n,k,d]]q MDS stabilizer code, then there exists a pure ¥q-linear 
[[n, k — r,r, d\\q MDS subsystem code for all r in the range < r < k. 

Proof. From Lemma 79, we know that the MDS stabilizer code with parameters [[n, fc,(i]]g exists and must 
be pure. Therefore it obey the quantum Singleton bound with equality. Therefore the pure subsystem code 
exists with parameters [[n, k ~ r,r, d]]q for < r < k and it must be an MDS code since it obeys the same 
bound with equality. □ 



7.3.2 Quantum Hamming Bound 

We can also derive the quantum Hamming bound on subsystem code parameters. We can show that It is 
easy to derive a Hamming like bound for pure subsystem codes as stated in the following lemma. 

Lemma 82 (Hamming Bound.). A pure {{n, K, K' ,d))q code satisfies 

E (") - IF < 97^^'- (7.4) 

j=0 

Proof. By Lemma 76 a pure subsystem {{n, K, K' , d))q code implies the existence of a pure {{n,KK',d))q 
code. But this obeys the quantum Hamming bound [ ]. Therefore it follows that 

E (^^{q^-iy <qVKK'. (7.5) 



□ 



Recall that a pure subsystem code is called perfect if and only if it attains the Hamming bound with 
equality. We conclude this section with the following consequence lemma: 
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Lemma 83. // there exists an ¥q-linear pure [[n, k, d]]q stabilizer code that is perfect, then there exists a pure 
¥q-linear [[n, k — r,r, d]]q perfect subsystem code for all r in the range < r < k. 

Proof. Existence of an F^-linear pure stabilizer code with parameters [[n, fc, d]]q implies existence of a sub- 
system code with parameters [[n, k — r,r, d]]q for < r < fc. But we know that the stabilizer code is perfect 
then 




(7.6) 



By Lemma 82, it is a direct consequence that the subsystem code obeys this bound with equality. 



□ 



In the following chapters, we will give various methods to construct subsystem codes. In addition, we will 
derive many families of subsystem codes. We will give tables of upper and lower bounds on subsystem code 
parameters. 



CHAPTER 8 



Subsystem Code Constructions 



Subsystem codes are the most versatile class of quantum error-correcting codes known to date that combine 
the best features of all known passive and active error-control schemes. The subsystem code is a subspace of 
the quantum state space that is decomposed into a tensor product of two vector spaces: the subsystem and the 
co-subsystem. In this chapter, A generic method to derive subsystem codes from existing subsystem codes is 
given that allows one to trade the dimensions of subsystem and co-subsystem while maintaining or improving 
the minimum distance. As a consequence, it is shown that all pure MDS subsystem codes are derived from 
MDS stabilizer codes. The existence of numerous families of MDS subsystem codes is established. 

8.1 Introduction 

Subsystem codes are a relatively new construction of quantum codes that combine the features of decoherence 
free subspaces [!'"], noiseless subsystems [Hf-'], and quantum error-correcting codes [^U, (i!)]. Such codes 
promise to offer appealing features, such as simplified syndrome calculation and a wide variety of easily 
implementable fault-tolerant operations, see [2, 14, 2.3, 112]. 

An {{n, K, R, d))q subsystem code is a i^T i?-dimensional subspace Q of that is decomposed into a 
tensor product Q = B of a X-dimensional vector space A and an i?-dimensional vector space B such 
that all errors of weight less than d can be detected by A. The vector spaces A and B are respectively called 
the subsystem A and the co-subsystem B. For some background on subsystem codes, see for instance [102, 
149, 14]. 

A special feature of subsystem codes is that any classical additive code C can be used to construct a 
subsystem code. One should contrast this with stabilizer codes, where the classical codes are required to 
satisfy a self-orthogonality condition. 

We assume that the reader is familiar with the relation between classical and quantum stabilizer codes, 
see [34, 152]. In [14, 102], the authors gave an introduction to subsystem codes, established upper and lower 
bounds on subsystem code parameters, and provided two methods for constructing subsystem codes. The 
main results on this chapter are as follows: 

i) If g is a power of a prime p, then we show that a subsystem code with parameters ((n, K/p,pR, > d))q 
can be obtained from a subsystem code with parameters ((n, K, R, d))q. Furthermore, we show that the 
existence of a pure ((rt, K, R, d))q subsystem code implies the existence of a pure {{n,pK, R/p, d))q code. 

ii) We show that all pure MDS subsystem codes are derived from MDS stabilizer codes. We establish here 
for the first time the existence of numerous families of MDS subsystem codes. 

8.2 Subsystem Code Constructions 

First we recall the following fact that is key to most constructions of subsystem codes (see below for notations) : 
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Theorem 84. Let C be a classical additive subcode of F^" such that C ^ {0} and let D denote its subcode 
D = C O C^°. If X = \C\ and y ~ \D\, then there exists a subsystem code Q ~ A (E) B such that 
i) dimA = q'^lixyfl'^, 
a) dimS — (xjyf-l'^ . 

The minimum distance of subsystem A is given by 

(a) d = swt((C + C-L=) - C) = swt(D^=' - C) if D^^ ^ C; 

(b) d = swi^D^") ifD^" = C. 

Thus, the subsystem A can detect all errors in E of weight less than d, and can correct all errors in E of 
weight < [{d - 1)/2J. 

A subsystem code that is derived with the help of the previous theorem is called a Clifford subsystem code. 
We will assume throughout this work that all subsystem codes are Clifford subsystem codes. In particular, 
this means that the existence of an {{n,K,R,d))q subsystem code implies the existence of an additive code 
C < F2" with subcode D = C n such that |C| = q"R/K, \D\ ^ q"/{KR), and d = swt(i:>^=' - C), see 
Fig. 8.1. 

A subsystem code derived from an additive classical code C is called pure to d' if there is no element of 
symplectic weight less than d' in C . A subsystem code is called pure if it is pure to the minimum distance 
d. We require that an {{n,l, R,d))q subsystem code must be pure. 

We also use the bracket notation [[n, fc, r, (i]]g to write the parameters of an {{n, q'^ , , d))q subsystem 
code in simpler form. Some authors say that an [[n, fc, r, c?]]g subsystem code has r gauge qudits, but this 
terminology is slightly confusing, as the co-subsystem typically does not correspond to a state space of r qudits 
except perhaps in trivial cases. We will avoid this misleading terminology. An ((n, K, l,d))q subsystem code 
is also an ((n, K,d))q stabilizer code and vice versa. 

Notation. Let q be a power of a prime integer p. We denote by F, the finite field with q elements. We use 
the notation {x\y) = (xi, . . . , Xn\yi, ■ ■ ■ , yn) to denote the concatenation of two vectors x and y in F^ . The 
symplectic weight of {x\y) E F^" is defined as 

swt(a;|y) = {{x^,y,) ^ (0,0) | 1 < i < n}. 

We define swt{X) = min{swt(x) \ x £ X,x ^ 0} for any nonempty subset X ^ {0} of F^". 
The trace-symplectic product of two vectors u— (a\h) and v — (a'|&') in F^" is defined as 

{u\v)s = trq/p(a' - b- a - &'), 

where x-y denotes the dot product and tr^/j, denotes the trace from Fg to the subfield Fp. The trace-symplectic 
dual of a code C C F^" is defined as 

C^- = {w e Ff I (v\w), = for all w e C}. 

We define the Euclidean inner product {x\y) — J27=i ^iVi ^^"^ ^^'^ Euclidean dual of C C FJ^' as 

= {x e F'; I {x\y) = for all y e C}. 

We also define the Hermitian inner product for vectors x,y in F"2 as {x\y)h — X]r=i •'^iVi Hermitian 
dual of C C F^2 as '' 

C^" ={xe F^2 I {x\y)h = for all y G C}. 



8.3 Trading Dimensions of Subsystem Codes 

In this section we show how one can trade the dimensions of subsystem and co-subsystem to obtain new codes 
from a given subsystem or stabilizer code. The results are obtained by exploiting the symplectic geometry 
of the space. A remarkable consequence is that nearly any stabilizer code yields a series of subsystem codes. 

Our first result shows that one can decrease the dimension of the subsystem and increase at the same 
time the dimension of the co-subsystem while keeping or increasing the minimum distance of the subsystem 
code. 
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Figure 8.1: Subsystem code parameters from classical codes 

Theorem 85. Let q be a power of a prime p. If there exists an {{n, K, R,d))q subsystem code with K > p 
that is pure to d' , then there exists an {{n,K/p,pR,> d))q subsystem code that is pure to min{d,d'}. If a 
pure {{n,p,R,d))q subsystem code exists, then there exists a {{n,l,pR,d))q subsystem code. 

Proof. By definition, an {{n, K, R,d))q Clifford subsystem code is associated with a classical additive code 
C C F2" and its subcode D = C n C^' such that x = \C\, y = \D\, K = R = {x/yf/^, and 

d = swt(L>-L'- ~C)\iC ^ otherwise d = swt(D-L=) if D-^' = C. 

We have q — for some positive integer m. Since K and R are positive integers, we have x = p'^^^^ and 
y ~ p'^ for some integers r > 1, and s > 0. There exists an F^-basis of C of the form 

C — Spanj.^{zi, . . . , Zs, Xs+l, Z^+l, . . . , Xs+r, Zs+r} 

that can be extended to a symplectic basis {cci, zi, . . . , Xum, Znm} of F^", that is, {xk \ xi) = 0, {zk \ zg) — 0, 
(xfe I zg) — 6k,e for all 1 < fc,£ < nm, see [43, Theorem 8.10.1]. 
Define an additive code 

Cm — Spanjp^jzi, . . . , Zg, Xg+l, Zg+l, . . . , Xg+r+l, Zg+r+l}- 

It follows that 

Cj^" = Spanjf^{zi, . . . , Zs, Xs+r+2j ^s+r+2j ■ ■ ■ j Xnrm Z^m} 

and 

D = Cm n C^= = spanF^{zi, . . . , zj. 

By definition, the code C is a subset of Cm- 

The subsystem code defined by Cm has the parameters (n, Km, Rm, dm), where Km = q"/(p'*+2'"+2pS^i/2 ^ 
K/p and Rm = ^ pR. For the claims concerning minimum distance and purity, we distin- 

guish two cases: 

(a) If Cm 7^ D^" , then K > p and dm — swt(Z?^= — Cm) > swt(_D^= ~ C) = d. Since by hypothesis 
swt(_D^= ~ C) = d and swt(C) > d' , and D C C C Cm ^ _D^= by construction, we have swt(Cm) > 
minjd, d'}; thus, the subsystem code is pure to min{ c?,c?'}. 

(b) If Cm — then Km = 1 = K/p, that is, K — p; it follows from the assumed purity that d = 
swt{D^^ - C) = swt{D^^) = dm- 

This proves the claim. □ 

For Fq-linear subsystem codes there exists a variation of the previous theorem which asserts that one can 
construct the resulting subsystem code such that it is again F^-linear. 

Theorem 86. Let q be a power of a prime p. If there exists an ¥q-linear [[n,k,r,d]]q subsystem code with 
k > 1 that is pure to d' , then there exists an ¥q-linear [[n, fc — 1, r + 1, > d\]q .subsystem code that is pure to 
minjd, d'}. If a pure ¥q -linear [[n, l,r,d]]q .subsystem code exists, then there exists anWq-linear [[n,0,r-\-l, d]]q 
subsystem code. 
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Proof. The proof is analogous to the proof of the previous theorem, except that F^-bases are used instead of 
Fp-bases. □ 

There exists a partial converse of Theorem 85, namely if the subsystem code is pure, then it is possible to 
increase the dimension of the subsystem and decrease the dimension of the co-subsystem while maintaining 
the same minimum distance. 

Theorem 87. Let q be a power of a prime p. If there exists a pure ((n, K, i?, d))q subsystem code with R > 1, 
then there exists a pure {{n,pK, R/p,d))q subsystem code. 

Proof. Suppose that the {{n, K, R, d))q Clifford subsystem code is associated with a classical additive code 

Cm = Spanj-^{zi, . . . , Zg, Xs+l, Zg+l, . . . , Xg+r+l, Zs+r+l}- 

Let D = C„ n C^=. We have x = |C„| = p--^+^r+2^ y ^ \d\ = p^', hence K = q'^/p'-+' and R = p'^+i. 
Furthermore, d = swi{D^'). 
The code 

C = Span^^jzi, . . . , Zs, Xs+l, Z^+l, . . . , Xs+r, ^s+r} 

has the subcode D = CnC-'"=. Since |C| — \Cm\lv^ the parameters of the Clifford subsystem code associated 
with C are {{n,pK, R/p,d'))q. Since C C Cm, the minimum distance d' satisfies 

d' = swi{D^' "C)< swi{D^' - Cm) = swt(L'^0 = d. 

On the other hand, d' = swt(£'^= ~ C) > swt(_D^=) = d, whence d — d' . Furthermore, the resulting code is 
pure since d = swt(D-'-'') = swt(_D-'-= ^ C). □ 

Replacing Fp-bases by Fg-bases in the proof of the previous theorem yields the following variation of the 
previous theorem for Fg-linear subsystem codes. 

Theorem 88. Let q be a power of a prime p. If there exists a pure ¥q-linear [[n, fe,r, subsystem code 
with r > 0, then there exists a pure ¥q-linear [[n, fc -|- 1, r — 1, d]]q subsystem code. 

The purity hypothesis in Theorems 87 and 88 is essential, as the next remark shows. 

Remark 89. The Bacon-Shor code is an impure [[9,1,4, 3]]2 subsystem code. However, there does not exist 
any [[9, 5,3]]2 stabilizer code. Thus, in general one cannot omit the purity assumption from Theorems 87 
and 88, see also Fig. 8.2. 

An [[n, stabilizer code can also be regarded as an [[n, fc, 0, d]], subsystem code. We record this 

important special case of the previous theorems in the next corollary. 

Corollary 90. If there exists an (¥q-linear) [[n,k,d]]q stabilizer code that is pure to d' , then there exists for 
all r in the range < r < k an (Fq-linear) [[n,k — r,r,> d]]q subsystem code that is pure to min{c?, d'} . 
If a pure (Fq-linear) [[n,k,r,d]]q subsystem code exists, then a pure (¥q-linear) [[n,k + r,d]]q stabilizer code 
exists. 

This result makes it very easy to obtain subsystem codes from stabilizer codes. For example, if there 
is a stabilizer code with parameters [[9,3, 3]]2, then there are subsystem codes with parameters [[9,1,2,3]]2 
and [[9,2, 1,3]]2. The optimal stabilizer codes derived in [~~, 07] can all be converted to subsystem codes. 
These code families satisfy Singleton bound k + 2d — n + 2. An illustration of this corollary and families of 
subsystem codes based on RS codes are given in the next chapter. 

From Subsystem to Stabilizer Codes. We have established a connection from stabilizer codes to subsys- 
tem codes as well as trading the dimensions between subsystem codes and co-subsystem codes. This result 
is applicable for both pure and impure stabilizer codes. Here we show that not all subsystem (co-subsystem) 
codes can be reduced to stabilizer codes. We gave a partial answer to this statement in [14]. We showed that 
pure subsystem codes can be converted to pure stabilizer codes as stated in Lemma 91. 

Lemma 91. If a pure {{n,K,R,d))q subsystem code Q exists, then there exists a pure {{n, KR,d))q stabilizer 
code. 
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Proof. Let C be a classical additive subcode of F^" that defines Q. The code 

C — Span^^jzi, . . . , Zs, Xg+l, Zs+l, ■ ■ ■ , Xg+r: Zs+r} 

has subcode D = C O C^" . We have |C| = and \D\ — for some integers r > 1, and s > 0. 

Furthermore, we know that K = q'' / {\C\\D\)^/^ and R = ^/\C\/\D\, then KR = Since D C 

there exists an ((n, q"'/\D\, d'))q stabilizer code with minimum distance d' — wt{D^^^ — D). The purity of Q 
imphes that swt(D-^= - C") = swt(I?-^=) = d. As £> C C, it follows that d' = swt{D^^' - D) = swt{D^^) ^ d; 
hence, there exists a pure {{n, KR, d))q stabilizer code. □ 

Now, what we can say about the impure subsystem codes. It turns out that not every impure subsystem 
code can be transferred to a stabilizer code as shown in the following Lemma. 

Lemma 92. If an impure {{n, K, R,d))q subsystem code Q exists, then there not necessarily exists an impure 
{{n,KR,d))q stabilizer code. 

Proof. Let an impure {{n,K,R,d))q subsystem code Q exists. We prove by contradiction that there is 
no impure {{n,KR,d))q stabilizer code in general. The proof is shown by an example. We know that 
[[9, 1, 4, 3]]2 Becan-shor code is an impure code, which beats quantum Hamming bound for subsystem codes. 
If an [[9, 5,3]]2 stabilizer code exists, then it would not obey the quantum Hamming bound for quantum 
block codes. But, from the linear programming upper bound, there is no such [[9, 5, 3]] over the binary field, 
see [34]. Therefore, not every impure subsystem code gives stabilizer code. □ 

Subsystem versus Stabilizer Codes. There is a tradeoff between stabilizer and subsystem codes. We 
showed that one can reduce subsystem codes with parameters [[n, fc, r, c?]]g for < r < /c to stabilizer codes 
with parameters [[n— r, k, d\\q. Also, pure subsystem codes with parameters [[n, k, r, d]\q give raise to stabilizer 
codes with parameters [[n, k + r, d]]q. In the other hand, one can start with a stabilizer code with parameters 
[[n, A:,c?]]g and obtain a subsystem code with parameters [[n,k — r,r,d]]q, for < r < k, see Corollary 90. 
The comparison between subsystem codes and stabilizer codes can be viewed as follows. 

• Syndrome measurements. One way is to look at the number of syndrome measurements. Stabilizer codes 
need n — k syndrome measurements while subsystem codes need n — k — r for fixed n and d, as for example, 
the short subsystem code [[8, 2, 1, 3]]2 (or [[8, 1, 2, 3]]2). 

• Subsystem codes may beat the Singleton and Hamming bound. There might exist subsystem codes that 
beat the quantum Singleton bound fc+r < n— 2(i+2 and the quantum Hamming bound X]l=1) ^'^^^ 

1)* < q"' /KR. We have not found any codes for small length n < 50, using MAGMA computer algebra, 
that beat the Singleton bound. Most likely there are no codes that beat this bound as we showed in case 
of linear pure subsystem codes in [14]. Pure subsystem codes obey the quantum Hamming bound. In the 
other hand, there are some impure subsystem codes that beat the quantum Hamming bound. For example, 
subsystem codes with parameters [[9, 1, 4, 3]]2, [[25, 1, 16, 5]]2, and [[30, 1, 20, 5]]2 do not obey the quantum 
Hamming bound. They are constructed using Bacon-Shor code constructions over F2. In fact, we found 
many subsystem codes that do not obey this bound and be easily derived from this construction. 

• Encoding and decoding circuits. It has been shown that the encoding and decoding circuits of stabilizer 
codes can also be used in subsystem codes. The conjecture is that subsystem codes might have better 
efficient encoding and decoding circuits using benefit of the gauge qubits, see [24]. 

• Fault tolerant and subsystem codes. It has been shown recently that subsystem codes are suitable to 
protect quantum information since they have a good strategy of fault tolerant and high threshold values, 
see [2]. 



8.4 MDS Subsystem Codes 

In this section we derive all MDS subsystem codes. Recall that an [[n, k, r, d]]q subsystem code derived from 
an Fq-linear classical code C < F^" satisfies the Singleton bound k + r <n — 2d +2. A subsystem code 
attaining the Singleton bound with equality is called an MDS subsystem code. An important consequence 
is the following simple observation which yields an easy construction of subsystem codes that are optimal 
among the Fg-linear Clifford subsystem codes. 
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Figure 8.2: Stabilizer and subsystem codes based on classical codes 

Theorem 93. If there exists an ¥q-linear [[n,k,d]]q MDS stabilizer code, then there exists a pure ¥q-linear 
[[n, k — r,r, d]\q MDS subsystem code for all r in the range < r < k. 

Proof. An MDS stabilizer code must be pure, see [152, Theorem 2] or [07, Corollary 60]. By Corollary 90, a 
pure Fq-linear [[n, k, d]]q stabilizer code implies the existence of an F^-linear [[n, k — r,r,dr > d]]q subsystem 
code that is pure to d for any r in the range < r < fc. Since the stabilizer code is MDS, we have k — n—2d+2. 
By the Singleton bound, the parameters of the resulting Fg-linear [[n, n~2d-\-2 — r,r, dr\\q subsystem codes 
must satisfy (n — 2(i + 2 — r) + r < n — 2dr + 2, which shows that the minimum distance dr = d, as claimed. □ 



Remark 94. We conjecture that ¥q-linear MDS subsystem codes are actually optimal among all subsystem 
codes, but a proof that the Singleton bound holds for general subsystem codes remains elusive. 

We recall that the Hcrmitian construction of stabilizer codes yields Fq-linear stabilizer codes, as can be 
seen from our reformulation of [ , Corollary 2] . 

Lemma 95 ([T7]). // there exists an ¥q2-linear code X C F^a such that X C X^*^, then there exists an 
Fq-linear code C C F^" such that C C \C\ = \X\, swt(C^= - C) = wt(X^" - X) and swt(C) = wt{X). 

Proof Let {1, /?} be a basis of F^2 /¥q. Then tr^2 = /3 + is an element /3o of F^; hence, = -/3 + /3o- 
Let 

C = {{u\v) \u,v€¥'^,u + f3ve X}. 

It follows from this definition that \X\ — \C\ and that wt{X) ~ swt(C). Furthermore, if u + /3v and u' + (3v' 
are elements of X with u, v, u' , v' in FJ^, then 

= (u + [3vY ■ [u' + I3v') 

= u-u' + /3«+it) • v' + Pov ■ u' + I3{u ■ v' - V ■ u'). 

On the right hand side, all terms but the last are in F^; hence we must have (u ■ v' — v ■ u') — 0, which shows 
that (u|i))_Ls {u'\v'), whence C C . Expanding X^'' in the basis {1/3} yields a code C" C 0-^% and we 
must have equality by a dimension argument. Since the basis expansion is isometric, it follows that 

swt(C^-' -C)= wt(X-L'- - X). 

The F^-linearity of C is a direct consequence of the definition of C. □ 

In corollary 96, we give a few examples of MDS subsystem codes that can be obtained from Theorem 93. 

Corollary 96. i) An ¥q-linear pure [[n, n ~ 2d -\-2 — r,r, d]]q MDS subsystem code exists for all n, d, and 
r such that 3 < n < q, 1 < d < n/2 + 1, and 0<r<n — 2d+l. 



52 



Chapter 8: Subsystem Code Constructions 



a) An ¥q-linear pure [[{ly + l)^, {ly + l)q — 2u — 2 ~ r,r,u ~\- 2]]g MDS subsystem code exists for all v and r 
such that < V < q — 2 and Q < r < [u + \)q — 2t/ — 3. 

Hi) An ¥q-linear pure [[q — 1, q — I — 26 — r,r, 6 + l]]q MDS subsystem code exists for all 6 and r such that 
< (5 < (q - l)/2 andO <r <q-2S -1. 

iv) An ¥q-linear pure [[q, q ^ 26 — 2 — r' ,r' , 6 + 2]]q MDS subsystem code exists for all < 6 < {q — l)/2 and 
< r' < g - 2(5 - 2. 

v) An ¥q-linear pure [[q'^ ^ l,q^ — 26 — 1 — r,r,6 + l]]q MDS subsystem code exists for all S and r in the 
range < 6 < q — 1 and 0<r<q-^ — 2S~1. 

vi) An ¥q-linear pure [[q'^ , q^ — 26—2 — r', r', (5 + 2]]^ MDS subsystem code exists for all 6 and r' in the range 
< (5 < q - 1 and < r' <q^ -26-2. 

Proof. i) By [77, Theorem 14], there exist Fg-hnear [[n, n — 2d+2, d]]q stabiUzer codes for all n and d such 
that 3 < n < q and 1 < d < n/2 + 1. The claim follows from Theorem 93. 

ii) By [1G4, Theorem 5], there exist a [[{ly + l)q, (y + V)q — 2v — 2,v + 2]]g stabilizer code. In this case, the 
code is derived from an Fq2 -linear code X of length n over ¥qi such that X C X^^ . The claim follows 
from Lemma 95 and Theorem 93. 

iii) , iv) There exist Fg-linear stabilizer codes with parameters [[g—1, (7—2(5— 1, (5+1]]^ and [[(/, (7— 2(5— 2, (5+2]]^ 
for < (5 < ((7 — l)/2, see [ , Theorem 9]. Theorem 93 yields the claim. 

v) , vi) There exist F^-linear stabilizer codes with parameters [[g^ — 1, (7^ — 2(5 — 1, (5 + 1]]^ and [[(7^,(7^ — 
2(5 - 2, (5 + 2]]^. for < (5 < (7 - 1 by [ , Theorem 10]. The claim follows from Theorem 93. 

□ 

The existence of the codes in i) are merely established by a non-constructive Gilbert- Varshamov type 
counting argument. However, the result is interesting, as it asserts that there exist for example [[6, 1, 1,3]], 
subsystem codes for all prime powers g > 7, [[7, 1,2, 3]], subsystem codes for all prime powers (7 > 7, and 
other short subsystem codes that one should compare with a [[5,1,3]]^ stabilizer code. If the syndrome 
calculation is simpler, then such subsystem codes could be of practical value. 

The subsystem codes given in ii)-vi) of the previous corollary are constructively established. The subsys- 
tem codes in ii) are derived from Reed-Muller codes, and in iii)-vi) from Reed-Solomon codes. There exists 
an overlap between the parameters given in ii) and in iv), but we list here both, since each code construction 
has its own merits. 

Remark 97. By Theorem 88, pure MDS subsystem codes can always be derived from MDS stabilizer codes. 
Therefore, one can derive in fact all possible parameter sets of pure MDS subsystem codes with the help of 
Theorem 93. 

Remark 98. In the case of stabilizer codes, all MDS codes must be pure. For subsystem codes this is not 
true, as the [[9, 1,4,3]]2 subsystem code shows. Finding such impure [[n,k,r,d]]q MDS subsystem codes with 
k + r>n~2d + 2 is a particularly interesting challenge. 



8.5 Conclusion and Discussion 

Subsystem codes - or operator quantum error-correcting codes as some authors prefer to call them - are 
among the most versatile tools in quantum error-correction, since they allow one to combine the passive 
error-correction found in decoherence free subspaces and noiseless subsystems with the active error-control 
methods of quantum error-correcting codes. The subclass of Clifford subsystem codes that was studied in 
this chapter is of particular interest because of the close connection to classical error-correcting codes. As 
Proposition 123 shows, one can derive from each additive code over F, an Clifford subsystem code. This offers 
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more flexibility than the slightly rigid framework of stabilizer codes. However, there exist few systematic 
constructions of good families subsystem codes and much of the theory remains to be developed. For instance, 
more bounds are needed for the parameters of subsystem codes. 

In this chapter, we showed that any F^-linear MDS stabilizer code yields a series of pure F^-linear MDS 
subsystem codes. These codes are known to be optimal among the Fg-linear Clifford subsystem codes. We 
conjecture that the Singleton bound holds in general for subsystem codes. There is quite some evidence for 
this fact, as pure Clifford subsystem codes and F^-linear Clifford subsystem codes are known to obey this 
bound. 

We used Reed-MuUer and Reed-Solomon codes to derive pure F^-linear MDS subsystem codes. In a similar 
fashion, one can derive other interesting subsystem codes from BCH stabilizer codes, see for instance [13]. 



CHAPTER 9 



Families of Subsystem Codes 



In this chapter I construct famihes of subsystem codes over finite fields. I wiU derive cychc subsystem codes, 
as well as BCH and RS subsystem codes. I will present an optimal family of subsystem codes in a sense that 
this family obeys quantum Singleton bound with equality. This chapter and next one are appeared in a joint 
work with A. Klappenecker in [l i]. 

9.1 Introduction 

Let Q be a quantum code such that TC = Q ® Q^, where is the orthogonal complement of Q. Recall 
definition of the error model acting in qubits as shown in Chapter 3. We can define the subsystem code Q 
as follows. 

Definition 99. An [[n, k, r, d]]q subsystem code is a decomposition of the subspace Q into a tensor product 
of two vector spaces A and B such that Q = A ^ B, where dim A q'^ and dim_B ~ q^. The code Q is able 
to detect all errors of weight less than d on subsystem A. 

Subsystem codes can be constructed from classical codes over and ¥^2 . We recall the Euclidean and 
Hermitian construction from [14]. 

Lemma 100 (Euclidean Construction). If C is a k' -dimensional ¥q-linear code of length n that has a k" - 
dimensional subcode D = C O and k' + k" < n, then there exists an 

[[n, n-{k' + k"), k' ~ k", wt{D^ \ C)]]g 

subsystem code. 

Proof Let us define the code X ^ C x C C F^", therefore X-^^ = (C x C)-^' ^ C-^^ x (7-^=. Hence 
Y = X n X^' = (C X C) n {C^^ x C^=) = C n C^^. Let dimp, Y = k". Hence |A:||y| = q^'+''" and 
|Ar|/|y| — q^ ~^ . By Theorem [i , Theorem 1], there exists a subsystem code Q — A® B with parameters 
[[n, dim A, dimS, such that 

i) dimA = g"/(|A:||y|) = (j"-'^'-'^". 

ii) dimS = |A:|/|r| = q^'-^" . 

ill) d = swtiY^'XX) = wt(£i^ \ C). 

□ 

Also, subsystem codes can be constructed from two classical codes using the Euclidean construction as 
shown in the following lemma. 

Lemma 101 (Euclidean Construction). Let Ci C F^, be [n,ki]q linear codes where i € {1,2}. Then there 
exists an [[n,k,r,d]]q subsystem code with 
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• k = n- {ki+ k2 + k')/2, 

• r = {ki + k2 — k')/2, and 

• d - min{wt((Cf n Ca)^ \ Ci),wt{{Ci- n Ci)^ \ C2)}, 
where k' = dimF,(Ci n C^) x {C^ n C2). 

Also, the subsystem codes can be derived from classical codes, that are defined over ¥q2, using the 
Hermitian construction. 

Lemma 102 (Hermitian Construction). Let C C F^a be an ¥q2 -linear [n, k, d]q2 code such that D — CD C^'' 
is of dimension k' = dinip , D. Then there exists an 

[[n, n-k-k\k- k' , wt{D^'^ \ C)]]g 

subsystem code. 

Notation. If 5' is a set, then \S\ denotes the cardinality of the set S. Let g be a power of a prime integer 
p. We denote by ¥q the finite field with q elements. We use the notation {x\y) = {xi, . . . ,Xn\yi, ■ ■ ■ , yn) to 
denote the concatenation of two vectors x and y in F^\ The symplectic weight of {x\y) G F^" is defined as 

swt(a;|y) = ^{0,0)\l<i< n}. 

We define swt{X) — min{swt(a;) \ x G X,x 0} for any nonempty subset X ^ {0} of F^". The trace- 
symplectic product of two vectors u = {a\b) and v — {a'\b') in F^" is defined as 

{u\v)s = tr^/p(a' • 6 - a • b'), 

where x-y denotes the dot product and tr^/p denotes the trace from F^ to the subficld ¥p. The trace-symplectic 
dual of a code C C F^" is defined as 

C^- ={ve Ff I {v\w)s = for all w e C}. 

We define the Euclidean inner product {x\y) — J2"=i ^iVi ^^^'^ the Euclidean dual of C C F^ as 

^{xe F;' I {x\y) = for all y e C}. 

We also define the Hermitian inner product for vectors x,y in F^a as {x\y)h — X]"=i ^IVi ^^'^ the Hermitian 
dual of C C F^2 as 

C^" ={xe F^2 I {x\y)h = for all y e C}. 

9.2 Cyclic Subsystem Codes 

In this section we shall derive subsystem codes from classical cyclic codes. We first recall some definitions 
before embarking on the construction of subsystem codes. For further details concerning cyclic codes see for 
instance [8<S] and [130]. 

Let n be a positive integer and F^ a finite field with q elements such that gcd{n,q) = 1. Recall that a 
linear code C C F^ is called cyclic if and only if (cq, . . . , c„__i) in C implies that (c„_i, cq, . . . , Cn-2) in C. 

For g{x) in Fq[x], we write {g{x)) to denote the principal ideal generated by g{x) in Fq[a;]. Let tt denote 
the vector space isomorphism tt: F^ ^ i?„ = Fg[a;]/(a;" — 1) given by 

7r((co, . . . , c„_i)) = Co -t- cia; -I h c„_ix""^ -I- (x" - 1). 

A cyclic code C C F^ is mapped to a principal ideal 7r(C) of the ring i?„. For a cyclic code C, the unique 
monic polynomial g(x) in ¥q[x] of the least degree such that {g{x)) = 7r(C) is called the generator polynomial 
of C. If C C F^ is a cyclic code with generator polynomial g{x), then 



dimp^ C = n — degg{x). 
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Since gcd(n, q) — 1, there exists a primitive n^^ root of unity a over F^; that is, ¥q[a] is the spHtting field 
of the polynomial a;" — 1 over ¥q. Let us henceforth fix this primitive n'^ primitive root of unity a. Since 
the generator polynomial g{x) of a cyclic code C C is of minimal degree, it follows that g{x) divides the 
polynomial a;" — 1 in ¥q [x] . Therefore, the generator polynomial g{x) of a cyclic code C C FJ^ can be uniquely 
specified in terms of a subset T of {0, . . . ,n~ 1} such that 

gix) = Y[ix-a'). 
teT 

The set T is called the defining set of the cyclic code C (with respect to the primitive n*^ root of unity a). 
A defining set is the union of cyclotomic cosets modulo n. The following lemma recalls some well-known and 
easily proved facts about defining sets (see e.g. ['^H]). 

Lemma 103. Let Ci he a cyclic code of length n over ¥q with defining set a Ti for i ~ 1,2. Let N = 
{0, 1, . . . , n — 1} and Tf ~ {at mod n 1 1 G T} /or some integer a. Then 

i) Ci n C2 has defining set Ti U T2 . 

ii) Ci + C2 has defining set Ti n T2. 

iii) Ci C C2 if and only if T2 C Ti. 

iv) Ci has defining set N \ T^^ . 

v) C]^'' has defining set N \ T^^ provided that q = r^ for some positive integer r. 
Notation. If T is a defining set of a cyclic code of length n, then we denote henceforth by the set 

= {at mod n\te T}, 

as in the previous lemma. We use a superscript, since this notation will be frequently used in set differences, 
and arguably N \T^'' is more readable than \ ~qT. 

Now, we shall give a general construction for subsystem cyclic codes. We say that a code C is self- 
orthogonal if and only if C C C"*-. We show that if a classical cyclic code is self-orthogonal, then one can 
easily construct cyclic subsystem codes. 

Proposition 104. Let D he a self-orthogonal cyclic code of length n over ¥q with defining set To. Let To 
and Tqx respectively denote the defining sets of D and D^. If T is a subset of Tjj \ T]j±, then one can 
define a cycfic code C of length n over F, by the defining set Tc = To \ (T U r^i). U n - k = \Td\, 
r — \T U T^^\ with < r < n — 2k, and d = minwt(Z?-'- \ C), then there exists a subsystem code with 
parameters [[n, 71 — 2fc — r, r, d]]q. 

Proof. Since D is a self-orthogonal cyclic code, we have D C D^, whence Td± C Tjj by Lemma 103 iii). 
Observe that if s is an element of the set S = Td\ Td± =Td\{N\ T^^), the n — s is an element of S as 
well. In particular, T^^ is a subset of Tjj \ T£,±. 

By definition, the cyclic code C has the defining set Tq = Tjy \ (T U T^^); thus, the dual code C"*" has 
the defining set 

Tc± = N\Tc^ ^ Td± U (TUT^^). 

Furthermore, we have 

Tc U Tc± = {Td \ [T U T-i)) U (T^^ U T U T'^) = Td\ 

therefore, C n — D hy Lemma 103 i). 

Since n — k = \Td\ and r — \TU T^^\, we have dimp^ D = n — \T]j\ = k and dimp, C = n — \Tc\ = k + r. 
Thus, by Lemma 229 there exists an F^-linear subsystem code with parameters [[n, k, p, d]]q, where 

i) K = dim — dim C = n — k — {k + r)=n — 2k — r, 

ii) p = dim C — dim D = k + r — k = r, 
in) d = minwt(i:)^ \ C), 

as claimed. □ 

We notice that if wt(£') < wt(D-'-), then the constructed cyclic subsystem codes are impure. In addition, 
if d = wt{D^) — wt{D^\D), then the constructed codes are pure up to d. 

We can also derive subsystem codes from cyclic codes over F^2 by using cyclic codes that are self-orthogonal 
with respect to the Hermitian inner product. 
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Proposition 105. Let D be a cyclic code of length n over ¥q2 such that D C D Let To and T]j±f^ 
respectively be the defining set of D and D^'^ . If T is a subset of To \ Tjj±f^ , then one can define a cyclic 
code C of length n over F,2 with defining set Tc = To \ (T U T-«). If n - fc = |Td| and r = |T U T-?] with 
< r < n — 2fc, and d — wt{D^'^ \ C), then there exists an [[n, n — 2fc — r, r, djjg subsystem code. 

Proof. Since L* C £)-'-'', their defining sets satisfy Tq^,, C Td by Lemma 103 iii). If s is an element of 
Td \ Tjj±^ , then one easily verifies that —qs (mod n) is an element of Tjj \ T^j-,, . 

Let = {0, 1, . . . , n - 1}. Since the cyclic code C has the defining set Tc ^Td\ (TUT-"?), its dual code 
C-L" has the defining set T^^l,. = \ T~'' = T^±,^ U (T U T'l). We notice that 

Tc U Tc^u - [Td \ (T U p-")) U (T^^, U T U T"") ^ T^; 

thus, C n C-L" = -D by Lemma 103 i). 

Since n — k = \Pd\ and r = jT U we have dimD = n — \Pd\ = k and dimC — n — \Pc\ = k + r. 

Thus, by Lemma 102 there exists an [[n, n, p, d]]q subsystem code with 

i) K = dim D^'^ — dim C = (n ~ k) — (k + r) = n — 2k — r, 

ii) p = dim C — dim D^k + r — k^r, 
in) d = minwt(i:>^'' \ C), 

as claimed. □ 

We notice that if wt(Z3) < wt(D^''), then the constructed cyclic subsystem codes are impure. In addition, 
if d = wt{D^) — wt \_D), then the constructed codes are pure up to d. 

The previous two propositions allow one to easily construct subsystem codes from classical cyclic codes. 
We will illustrate this fact by deriving cyclic subsystem codes from BCH and Reed-Solomon codes. Also, one 
can derive subsystem codes from classical cyclic codes if the generator polynomial is known. 
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In this section we consider an important class of cyclic codes that can be constructed with arbitrary designed 
distance 6. We will construct families of subsystem BCH codes. 

Let n be a positive integer, ¥q be a finite field with q elements, and a is a primitive nth root of unity. 
A primitive narrow-sense BCH code C of designed distance 6 and length n is a cyclic code with generator 
monic polynomial g{x) over Fg that has a, , . . . , a^~^ as zeros, c is a codeword in C if and only if 



c{a) = c{a ) 



c{a^ ^) = 0. The parity check matrix of this code can be defined as 



H = 



a 

^,2 



v2('5-l) 



a 

T,2("-l) 



(9.1) 



We have shown in [13, 16] that narrow sense BCH codes, primitive and non-primitive, with length n and 
designed distance S are Euclidean dual-containing codes if and only if 2 < 5 < Jniax = gJLi (g^™^^"^ — 1 — (g — 
2)[m odd]). We use this result and [11, Theorem 2] to derive primitive subsystem BCH codes from classical 
BCH codes over and ¥g2 [14, 16]. 



Lemma 106. If q is a power of a prime, m is a positive integer, and 2 < S < gT^/^l _ i 
Phen there exists a subsystem BCH code with parameters [[g™ — l,n — 2m\{S — 1)(1 — l/?)] 
< r < n - 2m\{S - 1)(1 - 1/q)'] . 



- [q — 2)[m odd ]. 

- r, r, > (5]]g where 



Proof. We know that if 2 < (5 < (^T™/-^! — 1 — (g— 2)[m odd ], then there exists a stabilizer code with parameters 
[[g™ — 1, n — 2m\{5 — 1)(1 — l/q)] , > S\]q. Let r be an integer in the range < r < n — 2m\{5 — 1)(1 — l/g)] . 
From [ , Theorem 2], then there must exist a subsystem BCH code with parameters [[g™ — l,?i — 2m\{5 — 



l)(l-l/g)l -r,r,> 5]], 



□ 
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Lemma 107. If q is a power of a prime, m is a positive integer, and S is an integer in the range 2 < 6 < 
<5max = (7™+["' — 1 — ((jf^ — 2)[m even], then there exists a subsystem code Q with parameters 

- 1, g'" - 1 - 2m\i6 - 1)(1 - _ r, r, dg > 6]], 

that is pure up to S, where < r < g^™ — 1 — 2m\{S — 1)(1 — l/q'^)~\ . 

Proof. If 2 < (5 < (5niax = (7™+['" — 1 — (g^ — 2) [to even], then exists a classical BCH code with parameters 
[g™ — 1,(7™ — 1 — m\{6 — 1)(1 — l/q)'],> S]q which contains its dual code. From [ , Theorem 2], [5], then 
there must exist a subsystem code with the given parameters. □ 

Instead of constructing subsystem codes from stabilizer BCH codes as shown in Lemmas 106, 107, we 
can also construct subsystem codes from classical BCH code over Fg and ¥^2 under some restrictions on the 
designed distance. Let d be a cyclotomic coset defined as {iq^ mod n \ j e Z}. 

Lemma 108. If q is a power of a prime, m is a positive integer, and 2 < S < gT^/^l — 1— (q — 2)[to odd ]. Let 
D be a BCH code with length n — — 1 and defining set Tjj = {Cq, Ci, . . . , Cn-s}, such that gcd(n, q) — 1. 
Let T C {0} U {Cs, . . . , Cn-s} be a nonempty set. Assume C ¥^ be a BCH code with the defining set 
Tc = {Co, Ci, . . . , Cn-s} \ (T U T^^) where T^^ — {—t mod n | t e T}. Then there exists a subsystem BCH 
code with the parameters [[n, n — 2k ~ r,r,> S]]q, where k — m\{b — 1)(1 — 1/q)] and r — \T\^ T^^\. 

Proof. The proof can be divide into the following parts: 

i) We know that Td = {Co, Ci, . . . , C„-5} and T C {0} U {C5, . . . , Cn-&\ be a nonempty set. Hence 
T^D = {Ci> • ■ ■ ,C5_i}. Furthermore, if 2 < (5 < q^"^!"^^ - \- {q-2){m odd ], then D C . Furthermore, 
let k — m\{S — 1)(1 — l/q)~\ , then dimD^ = n — k and dimZ) = k. 

ii) We know that C € is a BCH code with defining set Tc = Td\ (TUT"!) = {Cq, Ci, . . . , Cns} \ (TU 
T^^) where T'^ = {-t mod n\teT}. Then the dual code C-^ has defining set = {Ci, . . . , Cs-i}U 
T U = Td± U T U We can compute the union set To as Tc U = {Co, Ci, . . . , Cns} = Tjj. 
By Lemma 103, therefore, C n C-'- = D. Furthermore, if r |T U T"^], then dimC = fc + r. 

iii) From step (i) and (ii), and for < r < n — 2k, and by Lemma 229, there exits a subsystem code with 
parameters [[n, diniD — dim C, dim C — dim_D, c?]]g = [[n, n — 2k — r,r,d\]q, d = muiwt{D^ — C) > 5. 

□ 

Also, we can derive subsystem BCH codes from classical BCH codes over ¥^2 as shown in the following 
Lemma, see [IG, 13, 5]. 

Lemma 109. If q is a power of a prime, n,m are positive integers, and gcd(n,q) = 1. Let n = (g^)"' — 1, 
2 < 6 < g'" - 1 - (q - 2)[to odd ] and T C {0} U {Cs, . . . , Cns}- Let C C ¥"^2 be a cyclic code with the 
defining set Tc = {Co, Ci, . . . , Cn-s} \ {T U T^'') where T^'' = {—qt mod n | i e T}. Then there exists 
a cyclic subsystem code with the parameters [[n, n — 2fc — r, r, > S]]q, where k — m\(5 — 1)(1 — l/g^)] and 
< r = |ruT~'?| <n-2k. 

Proof. The proof is very similar to the proof shown in Lemma 108 taking in consideration that the classical 
BCH codes are over ¥q2 . 

1) We know that the BCH code contains its Hermitian dual code if 2 < (5 < — 1 — (g — 2)[to odd ]. Let 
n = {q'^Y" — 1 and D-^*^ C F^'2 be a BCH code defined with a designed distance S. The dual code D^'' 
has defining set T^x^ = {Ci, . . . , Cs-i}. Consequently, the code D has defining set {Co, Ci, . . . , Cns} 
and it is self-orthogonal, i.e., D C D^'^ . Furthermore, if fc = m\{S — l/?^)] , then dim ^ n — k 

and dim = fc. 

ii) We know that C C F^'2 is a BCH code with defining set Tc = {Co, Ci, . . . , Cn-s] \ {T U T-i) where 
T-'' = {-qt mod n\t£T}. Then the dual code C-^" has defining set Tc±^ = {Ci, . . . , Cs-i}UTUT~'J . 
We can compute the union set T^ as TcUTq±^ = {Co, Ci, . . . , Cn-s}- Therefore, CnC^'' = D. Assume 
r = |TUT-«|, then dimC = fc + r 
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iii) From step (i) and (ii), and by Lemma 102 for < r < n — 2k, there exits a subsystem code with 
parameters [[n,n — 2k — r,r,d]]q, where k = m\{5 — 1)(1 — 1/q^)] and < r = |T U T^''| < ?i — 2k, 
d = mmwt{D^ -C)>S. 

□ 

Tables 17.1 and 9.2show some famihes of subsystem BCH codes derived from classical BCH codes. The 
subsystem code [[21, 18, 1, 2]]2 constructed using BCH codes, but the stabilizer code [[21,19,2]]2 does not 
exist using the linear programming bound [:>4]. 

Table 9.1: Subsystem BCH codes that are derived using the Euclidean construction 



Subsystem Code 


Parent BCH 


Designed 




Code C 


distance 


[[15,4,3,3]]2 


[15,7, 5]2 


4 


[[15,6,1,3]]2 


[15,5,7]2 


6 


[[31,10,1,5]]2 


[31,11,11]2 


8 


[[31,20,1,3]]2 


[31,6,15]2 


12 


[[63,6,21,7]]2 


[63, 39, 9] 2 


8 


[[63,6,15,7]]2 


[63,36,11]2 


10 


[[63,6,3,7]]2 


[63,30, 13]2 


12 


[[63,18,3,7]]2 


[63,24,15]2 


14 


[[63,30,3,5]]2 


[63,18,21]2 


16 


[[63,32,1,5]]2 


[63,16,23]2 


22 


[[63,44,1,3]]2 


[63,10,27]2 


24 


[[63,50,1,3]]2 


[63,7,31]2 


28 


[[15,2,5,3]]4 


[15,9,5]4 


4 


[[15,2,3,3]]4 


[15,8,6]4 


6 


[[15,4,1,3]]4 


[15,6,7]4 


7 


[[15,8,1,3]]4 


[15,4, 10]4 


8 


[[31,10,1,5]]4 


[31,11,11]4 


8 


[[31,20,1,3]]4 


[31,6, 15]4 


12 


[[63,12,9,7]]4 


[63,30, 15]4 


15 


[[63,18,9,7]]4 


[63,27,21]4 


16 


[[63,18,7, 7]]4 


[63,26,22]4 


22 



* punctured code 
+ Extended code 



It may be useful to end up this section with an example 

Example 110. Consider a BCH code with designed distance d = 5 and length n — 2^ — 1 over F4. 
Then Ci = {1,2,4,8,16}, C2 = {3,6,12,24,17}, and C5 = {5,10,20,9,18}. Then Tjj±^ = Ci U C3. Hence 
dimD = 10 and dimD-^" = 21. Now, let T = C5, so, T"? = Cn = {11,13,21,22,26} and T^^^ = 
Tjy±i^ UTUT^''. We have \T(-,±f^ = 20\, therefore dimC — 20. Conseqeuntly, there exists a subsystem BCH 
codes with parameters [[n, dmiD^'^ — dimC, dim C — dim!?, > S\]q = [[31, 1, 10, > 5]]2. Some subsystem BCH 
codes are shown in Tables 17.1 and 9.2. 

9.4 Subsystem RS Codes 

In this section we will derive cyclic subsystem codes based on Reed-Solomon codes. Also, we show that given 
optimal stabilizer codes, one can construct optimal subsystem codes. Recall that a Reed-Solomon code over 
Fg is a BCH code with length n = q — 1 and minimum distance equals to its designed distance S. Therefore, 
the RS code C with designed distance 6 has defining set T with size S — 1. This can be seen as all roots lie 
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Table 9.2: Subsystem BCH codes that are derived with the help of the Hermitian construction 



Subsystem Code 


_rarent rJL/xl 


Designed 




Uocle O 


distance 


rri A 1 o /ill 
[[14, 1,3,4JJ2 


[14, 8,5j22 


6 


[[15, 1,2,5JJ2 


[15, 8,6j22 


b 


rri r r o Qll 

[[15,5,2,3Jj2 


[15, b, 7J22 




\\^ a c Qll 


[lb, b, /J22 


7+ 


rri I? o 1 /ill 
[[17, 8,l,4Jj2 


[17, 5,9j22 


4 


r ro 1 o o oil 

[[21,6,3,3JJ2 


roi r\ Til 

[21,9, 7JJ22 


6 


rroi T o oil 
[[21,7,2,3JJ2 


roi Ai 

[21,8,9j22 




8 


r To 1 1 (~v 1 p' 1 1 

[[31,10, 1,5]]2 


[31,11,11]22 


8 


rroi on i Qll 

[[31,20, 1,3JJ2 


Fq 1 1 c;l 

[31, b, I5J22 




[[32,10,1,5]]2 


[32,11,11]22 


8+ 


[[32,20,1,3]]2 


[32,6,15]22 


12+ 


[[25,12,3,3]]3 


[25,8,12]32 


9* 


[[26,6,2,5]]3 


[26,11,8]32 


8 


[[26,12,2,4]]3 


[26,8,13]32 


9 


[[26,13,1,4]]3 


[26,7, 14]32 


14 


[[80,1,17,20]]3 


[80,48,21]32 


21 


[[80,5,17,17]]3 


[80,46,22]32 


22 



* punctured code 
+ Extended code 



in different cyclotomic cosets. The dimension of a RS code is given by n — (5 + 1. RS codes are an important 
class of optimal cyclic codes. They are MDS codes, in which Singleton bound is satisfied with equality. 

Grassl et al. in [ ] showed that optimal stabilizer codes with maximal minimum distance exist with 
parameters [[n, n — 2d+2, d]]q over ¥q for 3 < n < g and 1 < c? < n/2 + 1. Also, optimal stabilizer codes exist 
with parameters [[q^, — 2d + 2, d]]q for 1 < d < q over F^, see [ ; , Theorems 9, 10]. These codes satisfy the 
quantum Singleton bound k + 2d = n + 2. The following subsystem codes are optimal since they obey the 
singleton bound k + r + 2d = n + 2 as shown in [1 !, Theorem 21]. 

Lemma 111 (Reed-Solomon Subsystem codes). Let q be power of a prime. 

i) If < S < {q — l)/2 there exist subsystem codes with parameters [[q — l,q ^ 26 — 1 — r,r,S + l]]q and 
[[q,q-2S-2^r,r,5 + 2]]q. 

ii) If < S < q — 1 there exist subsystem codes with parameters [[g^ — 1, q'^ — 26 — 1 — r,r, 6 + l]]q and 
[[q\q^-2S-2~r,r,6 + 2]]q 

Proof. i) We know that if < (5 < (g — l)/2, then there are stabilizer codes with parameters [[q — l,q ~ 
2(5 - 1,6 + l]]q and [[q, q - 25 ~ 2,6 + 2]]q, see [V , Theorem 9]. Now, let < r < g - 2^ - 1, then 
using [li, Corollary 6], there are subsystem codes with parameters [[q — l,q — 25 — 1 — r,r,6 + l]]g and 
[[q,q-26-2-r,r,6 + 2]]q. 

ii) Similarly, ii < 6 < q — 1, then from [ , Theorem 10], there exist stabilizer codes with parameters 
[[(?2 - I, q^ -25-1,6 + l]]q and [[q^, q^ - 26 - 2 - r,r,5 + 2]],. Assuming < r < q^ - 26 - 1, then 
from [1 I , Corollary 6], there exist subsystem codes with parameters [[g^ — l,q'^ — 26 — 1 — r,r,6 + l]]q 
a.i-id[[q^,q^ -26-2-r,r,6 + 2]]q. 

□ 

Instead of extending the subsystem code that we constructed, one can start with a subsystem code with 
length n — q and shorten it to a subsystem code with length n ~ g — 1- These subsystem codes are all 
Fg2-linear. Therefore they satisfy fc + r = n — 2d + 2. As a consequence the subsystem codes in Lemma 111 
are optimal. The subsystem codes that we derive are not necessarily cyclic. In order to derive cyclic codes 
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we need to make further restrictions on the codes. The foUowing lemma gives an exphcit construction for 
cychc subsystem codes based on the Reed-Solomon codes over F^. 

Lemma 112. Let q be a prime power, and n = q — 1, 2 < S < (q — l)/2 and T C {0} U {S, . . . ,n — 6}. Let 
C C 6e a cyclic code with the defining set Tc — {0, 1, . . . , n — 5} \ (T U T^^) where T^^ — {~t mod n \ 
t G T}. Then there exists a cyclic subsystem RS code with the parameters [[n, n — 2d + 2 — r,r,> 6]]q, where 
0<r = |ruT-i| < n - 2((5 + 1). 

Proof. We divide the proof to the following parts 

i) We know that if 2 < 6 < {q — l)/2, then there exists classical cyclic code that contains its dual code 
D, i.e., D C D-^. The code Z?^ has defining set = {1, 2, 6 — 1}. Therefore the defining set of D 
is given by T/j = {0} U {1, • • • , n - 5} and D = CnC^. Also, dimD-^ =n-{S-l) and dimL» ^5-1. 

ii) Let T C To be a nonempty set and T^^ = {—t mod n \ t E T}. Let C C F^ be a cyclic code with the 
defining set Tc = To \ (T U T^^). We can actually compute the defining set of the dual code as 
Tc^ = Td± U T U T-^. Wc notice that Tc U Tc± = {1, 2, • • • , n - 5} U {0} = T^,. Let k = 6 - I and 
< 7— |ruT-i| <n-2k. 

iii) From steps (i), (ii) and by using Lemma 229, there is a subsystem code with [[ti, fc,r, > 6]]q, where 
fc = n-25 + 2-rand0<r = \TUT-^\ <n-2{d -1). 

□ 

Also, cyclic subsystem codes, based on RS codes over ¥^2 , can be derived as shown in the following lemma. 
Some codes are shown in Table 9.3. 

Lemma 113. Let q be a prime power, n = q^ — 1, and 2 < 5 < (q — 1). Let T C {0} U {qS, . . . , q{n — 5)} 
be a nonempty set. Let C C F^'a be a cyclic code with the defining set Tc = {0, <?,..., q{n — S)} \ (T U T""^) 
where T~' = {^qt mod n \ t € T}. Then there exists a cyclic subsystem RS code with the parameters 
[[n,n-2{5 -1) -r,r,> S]]g, where < r = |TU T^^l < n - 2{S - 1). 

Proof. The proof is a direct consequence as shown in the previous lemmas. 

We know that ii 2 < S < {q — 1), then there exists a cyclic code D-^ over F^2 that contains it is dual 
code D. The code D^'^ has length n, and minimum distance 6. The defining set of the code D is given by 
Td ^ {q,2q,- ■■ ,q{n-d)} U{0} 

We just notice that the defining set of the dual code C^'* is given by T(j±^ = {q, 2q, (/(J — l)}UTur~'. 
Furthermore, Tc U Tc±^ = {q, 2g, • • • , q{n - S)} U {0} = To- Hence, D CC, D C C-^", and £> = C n C^". 
From Lemma 102, there must exist a cyclic subsystem RS code with parameters [[n, fc,r, > S]]q, where 
fc n - 2((5 - 1) - r and < r |T U T-«| < n ~ 2{5 + 1). □ 

In table 9.3 we show various optimal subsystem codes derived from RS codes. Some of these codes 
have been derived by puncture existing subsystem codes. It is also possible to derive some optimal impure 
subsystem codes. For instance [[9,1,4, 3]]2 is an optimal impure subsystem codes. 

Puncture Subsystem Codes The MDS subsystem codes constructed from RS codes can also be punc- 
tured to other subsystem codes. Recall that if there is a subsystem code with parameters [[n, fc,r, d]]^ then 
there is a subsystem code with parameters [[n — 1, fc, r, > — 1]^. This is known as the propagation rules of 
quantum code constructions. 

We end up this section by presenting two examples to illustrate the previous construction. 

Example 114. Let C be a RS code with length n = g — 1 = 6 over ¥q. Define N — {0, 1, 2, 3, 4, 5}. We can 
construct subsystem code from RS codes with parameters [6,4, 3]7. This code is a subcode- sub field in BCH 
codes with deigned distance (5 = 3. So, Td± = {1,2}, Td = {0,1,2,3} , Tc = {1,2,3} andTci- = {0,1,2}. 
We notice that Tjj — Tc U Tc± and dimC ~ 3, dimZ? = 2 and dimZ?^ = 4. So, we have k=4-3=l and 
r— 3-2=1. Consequently, there exists a subsystem code with parameters [6,1,1,3] overWj 

The previous example shows the shortest subsystem codes with length n = 6. However, it is not necessarily 
that this code exists only over F7. In fact, as we were able to show that there exists a subsystem code with 
length n = 6 over F3. 
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Table 9.3: Optimal pure subsystem codes 



Subsystem Codes 


Parent 
Code (RS Code) 


f[8, 1,5,211c. 
[[8,4,2,2]]3 
[[8,5,1,2]]3 
[[9,1,4,3]]3 
[[9,4,1,3]]3 


[8,6,3132 
[8,3,6]32 
[8,2,7132 
[9,6,41^ 5 = 3 
[9,3,71T„5 = 6 


[[15,1,10,3]]4 
[[15,9,2,3]]4 
[[15, iU, i, djj4 

rfi /3 1 n /111 
[[16, 1,9,4JJ4 


[15,12,4]42 
[15,4,12]42 

[10,0, iOj42 

[lb, 12, 51^2, - 4 


[[24,1,17,4]]5 
[[24,16,2,4]]5 
[[24,17,1,4]]5 
[[24,19,1,3]]5 
[[24,21,1,2]]5 
[[23,1,18,3]]5 
[[23,16,3,3]]5 


[24,20,5152 
[24,5,20152 
[24,4,21152 
[24,3,22152 
[24,2,23152 
[23,20,4];2,<5 = 5 
[23,5,19]*2,<5:=20 


[[48,1,37,6]]7 


[48,42,7172 



* Punctured code 
f Extended code 



Example 115. Let F13 be the finite field with g = 13 elements. Let D be the narrow-sense Reed-Solomon 
code of length n = 12 and designed distance 5 — 5 over F13. So, has defining set T£,± — {1,2,3,4}. 
Therefore, is an MDS code with parameters [12,8,51. dual of is a RS code D with defining set 
Td = {0, 1, 2, 3, 4, 5, 6, 7}. Also, D is an MDS code with parameters [12, 4, 9] . Clearly, from our construction, 

DC Td± C Td 

Now, let us define the code C by choosing a defining set Tq — {1, 2, 3, 4, 7}. So, D C C <f=^ Tc C Tq. Also 
compute the defining set of as T(j± — {0,1,2,3,4,6,7}. So, D C <^=> T(j± C Tjj. We see from our 
construction of these codes that 

CnC^ ^ D 4=^TcUTc± = Td- 

Hence, we can compute the parameters of the subsystem code as follows. The minimum distance is given by 
dmin — D-^\C — 5, dimension k = diuiD^ — dimC = 8 — 7=1, and gauge qubits r — dimC — dimD = 
7 — 4 = 3. Therefore, we have a subsystem code with parameters [[12, 1, 3, 5]1, which is also an MDS code 
obeying Singleton bound k + r + 2d = ji + 2. 

Actually, if we choose the defining set of C to be Tc — {1,2,3,4,6,7}, then the defining set of is 
T(j± — {0,1,2,3,4,7}, then we get a subsystem code with parameters dmin — D'^\C = 5, k = dimD-^ — 
dimC = 8 — 6 = 2, r = dimC — dim_D = 6 — 4 = 2. Therefore, we have a subsystem code with parameters 
[[12, 2, 2, 5]1, which is also an MDS code. Some of subsystem RS codes are listed in Table 9.4. 

9.5 Subsystem Codes [[8, 1, 2, 3]]2 and [[6, 1, 1, 3]]3 

In this section we present the generator matrices of two short subsystem codes over F2 and F3 fields. Corol- 
lary 90 implies that a stabilizer code with parameters [[n, fc, d]]q gives subsystem codes with parameters 
[[n, k-r,r, d]]q, see Tables 17.1, 9.2, 9.3, 9.4, 9.5. 

Consider a stabilizer code with parameters [[8,3,3]l2. This code can be used to derive [[8,2, l,3ll2 and 
[[8, 1, 2,3]l2 subsystem codes. We give an explicit construction of these codes. We obtain these codes using 
MAGMA computer algebra search . It remains to study properties of these codes and whether they have nice 
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Tabic 9.4: Rccd-Solomon(RS) subsystem codes 



Subsystem Codes 


Parent 
RS Code 


[[15,1,10,3]]4 
[[15,1,8,3]]4 
[[15,1,6,3]]4 
[[15,2,5,3]]4 


[15,12,4]42 
[15,11,5]42 
[15,10,6]42 
[15,9,7]42 


[[24,1,17,4]]5 
[[24,2,10,4]]5 
[[24,4,10,4]]5 
[[24,16,2,4]]5 
[[24,17,1,4]]5 
[[24,19,1,3]]5 


[24,20,5]52 
[24,16,9]52 
[24,15,10]52 
[24,5,20]52 
[24,4,21]52 
[24,3,22]52 


[[48,1,37,6]]7 
[[48,2,26,6]]7 


[48,42,7]72 
[48,36,13]72 



error correction capabilities. We show the stabilizer and normalizer matrices for these codes. Also, we prove 
their minimum distances using the weight enumeration of these codes. It was known that the [[9, 1,4, 3]]2 
Becan-Shor code is the shortest subsystem code constructed via graphs, in which it tolerates 4 gauge qubits. 
We present two codes with less length, however we can not tolerate more than 2 gauge qubits. The following 
example shows [[8, 1, 2, 3]] subsystem code over F2. 

Example 116. 
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(9.5) 



We notice that the matrix Ds generates the code D — CnC^°. Furthermore, dimensions of the subsystems 
A and B are given by k = dimD-*-' — dimC = (11 — 7)/2 — 2 and r = dim C — dim D = (7 — 5)/2=l. Hence 
we have [[8,2,1,3]]2 and [[8,1,2, 3]]2 subsystem codes. 

We show that the subsystem codes [[8, 1,2,3]]2 is not better than the stabihzer code [[8,3,3]]2 in terms 
of syndrome measurement. The reason is that the former needs 8 — 1 — 2 = 5 syndrome measurements, while 
the later needs also 8 — 3 = 5 measurements. This is an obvious example where subsystem codes have no 
superiority in terms of syndrome measurements. 

We post an open question regarding the threshold value and fault tolerant gate operations for this code. 
We do not know at this time if the code [[8,1,2, 3]]2 has better threshold value and less fault-tolerant 
operations. Also, does the subsystem code with parameters [[8, 1, 3, 3]]2 exist? 

No nontrivial [[7, 1, 1, 3]]2 exists. There exists a trivial [[7, 1, 1, 3]]2 code obtained by simply extending 
the [[7, 1, 3]]2 code as the [[5, 1, 3]]2 code. We show the smallest subsystem code with length 7 must have at 
most minimum weight equals to 2. Since [[7, 2, 2]]2 exists, then we can construct the stabilizer and normalizer 
matrices as follows. 
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(9.7) 



Clearly, from our construction and using Corollary 90, there must exist a subsystem code with parameters 
k and r given as follows. dim_D^'' = 9/2 and dimC = 7/2. Also, dimZ) = 5/2 and min{D^'\C) — 2. 
Therefore, , fc = (9 — 7)/2 = 1 and r = (7 — 5)/2 = 1. Consequently, the parameters of the subsystem code 
are [[7, 1, 1, 2]]2. 

This example shows [[6, 1, 1, 3]] subsystem code over F3. 

Example 117. We give a nontrivial short subsystem code over¥^. This is derived from the [[6,2,3]]3 graph 
quantum code, see [ ] for existence results and [7fJ] for a method to construct the code. Also, we showed an 



example earlier for an [[6,1,1,3]] subsystem code over Ft. 
code defined by the following generator matrix. 
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Consider the field F; 
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and let C C W}^ be a linear 
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Let the symplectic inner product {{a\b)\(c\d)) s = a ■ d — b ■ c 

S 



Then the symplectic dual of C is generated by 



where X2 ^ [ 
Z2 = [ 
D defines a [[6,2,3] 
fore, swt{D^' \ D) 



X2 
Z2 



0001|l02000janrf 

0|0 1 1 1]. The matrix S generates the code D ~ C C^" . Now 
3 stabilizer code /W, Theorem 3.1] and ["/''>, Theorem 1 and Equation (15)]. There- 
- 3. It follows that swt(£'-'-'' \ C) > swt(Z?^=) = 3. By [ , Theorem 4], we have a 



[[6, (dim Z? — dim C)/2, (dimC — dini_D)/2, 3]]3 viz. a [[6,1,1,3]]3 subsystem code. 

We can also have a trivial [[6, 1, 1, 3]]2 code. This trivial extension seems to argue against the usefulness 
of subsystem codes and if they will really lead to improvement in performance. An obvious open question is 
if there exist nontrivial [[6, 1, 1, 3]]2 or [[7, 1, 1, 3]]2 subsystem codes. 



9.6 Conclusion and Discussion 

We constructed cyclic subsystem codes by using the defining sets of classical cyclic codes over ¥q and ¥^2 . 
Also, we presented a simple method to obtain subsystem codes from stabilizer codes and derived optimal 
subsystem codes from RS codes. In addition, we drove families of subsystem BCH and RS codes. We 
introduced the short subsystem codes over binary and ternary fields. We leave it as open questions to realize 
performance and usefulness of these codes. Also, we pose the construction of a nontrivial [[6, 1, 1,3]]2 code 
and compare its performance with the [[5, 1, 3]] 2 code as an open problem. 

One can derive many other families of subsystem codes using the Euclidean and Hermitian construction 
of subsystem codes. In addition, one can design the encoding and decoding circuits of cyclic subsystem codes. 



Table 9.5: Families of subsystem codes from stabilizer codes 



Family 


Stabilizer [[n, fc,d]]5 


Subsystem [[n,k — r,r,d]]q, 
k> r>0 


Short MDS 


[[n,n-2d + 2,d]]g 


[[n,n- 2d + 2- r,r, d]]q 


Hermitian 


[[n, n - 2m, 3]], 


m > 2, [[n, n — 2m — r, r, 3]]q 


Hamming 






Euclidean 


[[n, n - 2m, 3]], 


[[n, n - 2m - r,r, 3]], 


Hamming 






Melas 


[[n, n — 2m, > 3]], 


[[n, n — 2m — r,r,> 3]]q 


Euclidean 


[[n,n-2m\{5-l){l-l/q)],>5]]g 


[[n,n-2mr(5-l)(l-l/g)l -r. 


BCH 




r, > S]]q 


Hermitian 


[[n,n-2m\{S-l){l-l/q')-],>S]], 


[[n, n - 2m\{S - 1)(1 - l/g^)l - r. 


BCH 




r, > S]]q 


Punctured 


[[q' ~-qa,q' -qa-2u-2,u + 2]]. 


[[q'' — qa, q'' — qa — 2v — 2 — r, 


MDS 




r,^ + 2]]q 


Euclidean 


[[n,n-2d + 2]]g 


[[n,n-2d^2~r, r]]. 


MDS 






Hermitian 


[[g" - s,g" - s-2d + 2,d]]. 


[[q' -a,q' -s-2d + 2-r,r,d]]q 


MDS 






Twisted 


[[q^g'■-r-2,3]], 


[[g'-,g'-_^_2-r,r,3]l. 


Extended 


[[g^ + l,g^-3,3]]. 


[[g^ + l,g^-3-r,r,3]]. 


twisted 






Perfect 


[[n,n - s - 2,S]]q 


[[71, n - s - 2 - r,r,i\]q 




[[n,n- s - 2,3]]g 


[[n,n- s - 2 - r,r-,3]]g 



CHAPTER 10 



Propagation Rules and Tables of 
Subsystem Code Constructions 



In this chapter I present tables of upper and lower bounds on subsystem code parameters. I derive new 
subsystem codes from existing ones by extending and shortening the length of the codes. Also, I trade the 
dimension of subsystem A and co-subsystem B to obtain new subsystem codes from known codes with the 
same lengths. 

10.1 Introduction 

We investigate subsystem codes and study their properties. Given a subsystem code with parameters 
[[n,k,r,d\]q, we establish propagation rules to derive new subsystem codes with possibly parameters [[n + 
1, k, r, > d]]q, [[n — 1, A: — 1, > r, d\]q, etc. We construct tables of the upper bounds on the minimum distance 
and dimension of subsystem codes using linear programming bounds over F2 and F3. Also, we construct ta- 
bles of lower bounds on subsystem code parameters using Gilbert- Varshamov (GV) bound. We show that our 
method gives all codes over F2 for small code length and one can generate more tables over higher fields with 
large alphabets. Our results provide us with better understanding of subsystem codes in terms of comparing 
these codes with stabilizer codes. Subsystem codes need n — fc — r syndrome measurements in comparison to 
stabilizer codes that need n — k syndrome measurements. We show that some impure subsystem codes do 
not give raise to stabilizer codes. Also, such codes do not obey the quantum Hamming bound. 

Notation: We assume that g is a power of prime p and denotes a finite field with q elements. By 
qudit we mean a g-ary quantum bit. The symplectic weight of an element w = {xi, . . . ,Xn,yi, ■ ■ ■ ,yn) in 
F^" is defined as swt(w) = \{{xi,yi) ^ (0,0) | 1 < i < n}\. The trace-symplectic product of two elements 
u = {a\b),v — {a'\b') in F^" is defined as {u\v)s — trg/p(a' ■ b — a - 6'), where x ■ y is the usual Euclidean inner 
product. The trace-symplectic dual of a code C C F^" is defined as = {v e F^" | {v\w)s = for all w G 
C}. For vectors x,y in ¥^2, we define the Hermitian inner product {x\y)h = ^IVi ^^d the Hermitian 

dual of C C F^2 as C^** — {x £ F^a | {x\y)h = for all y € C}. The trace alternating form of two vectors u, w 
in F^'a is defined as {u\v)a — tr^/p[((u|w)/i — {v\u)h)/{P'^ — /3^')], where is a normal basis of Fg2 over 

Fg. If C C F^'a, then the trace alternating dual of C is defined as C^" = {x e F^a | {x\y)a = for aU y e C}. 

10.2 Upper and Lower Bounds on Subsystem Code Parameters 

We want to investigate some limitations on subsystem codes that are constructed in the previous chapters. 
Bounds on code parameters are useful for many reasons such as the computer search can be minimized. To 
that end, we will investigate some upper and lower bounds on the parameters of subsystem codes. 
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Linear Programming Bounds. We will show the linear programming bound as an upper bound on 
subsystem code parameters. We ensure that one can not hope to obtain subsystem codes unless they obey 
this bound. This also means that if a subsystem code obeys this bound, it is not guaranteed that the code 
itself will exist unless it can be constructed. Assume we have the same notation as above. 

Theorem 118. If an {{n, K, R, d))q Clifford subsystem code with K > 1 exists, then there exists a solution 
to the optimization problem: maximize subject to the constraints 

1. Ao = So = 1 and < Bj < Aj for all l<j< n; 

n n 

K " 

3. A^' = ~nj^ Kj[r)Ar holds for all j in the range < j < n; 

4- Bj'" = — — Kj(r)Br holds for all j in the range < j < n; 

5. Aj = Bj'' for all j in < j < d and Aj < B^^ for all d < j < n; 

6. Bj = Aj'" for all j in < j < d and Bj < Aj'" for all d < j < n; 

7. (p — 1) divides Aj , Bj, Aj'' , and Bj'" for all j in the range 1 < j < n; 

where the coefficients Aj and Bj assume only integer values, and Kj (r) denotes the Krawtchouk polynomial 

^.M-E(-ir(^^-ir^Q (■:;)■ (10.1) 

Proof. If an ((n, K, R, d))q subsystem code exists, then the weight distribution Aj of the associated additive 
code C and the weight distribution Bj of its subcode D — C D obviously satisfy 1). By Lemma 229, we 
have K = g"/v/|C||L»| and R = ^/\C\/\D\, which implies |C| =J2^j ^ q'^R/K and \D\ = ^ = q'^/KR, 
proving 2). Conditions 3) and 4) follow from the Mac Williams relation for symplectic weight distribution, see 
[97, Theorem 23]. As C is an Fp-linear code, for each nonzero codeword c in C, ac is again in C for all a in 
Fp ; thus, condition 7) must hold. Since the quantum code has minimum distance d, all vectors of symplectic 
weight less than d in _D^= must be in C, since D-^" — C has minimum distance d; this implies 5). Similarly, 
all vectors in C^' C C + of symplectic weight less than d must be contained in C, since (C + C^') — C 
has minimum distance d; this implies 6). □ 



We can use the previous theorem to derive bounds on the dimension of the co-subsystem. If the op- 
timization problem is not solvable, then we can immediately conclude that a code with the corresponding 
parameter settings cannot exist. We are able to solve this optimization problem and have constructed Ta- 
ble 10.2 over F2. Also, Table 10.3 shows code parameters of subsystem codes over F3. It is not necessary that 
the short subsystem codes are binary. The linear programming indicates that there is no subsystem code 
with parameters [[6, 1, 1, 3]]2. However, there is a subsystem code with parameters [[6, 1, 1, 3]]3 constructed 
over graphs. 

Impure Subsystem Codes and Hamming Bound. The following Lemma shows that there exist some 
families of subsystem codes that beat the quantum Hamming bound. For stabilizer Hamming codes see the 
tables given in [ ]. 

Lemma 119. // there exists an [[n,k,d]]q stabilizer perfect code and d' > d + 2 , then there must be an 
[[n, k — r, r, d']]q subsystem code that beats the Hamming bound. 
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Proof. We know that the stabilizer code satisfies the Hamming bound 

L(<i-1)/2J 



E 

i=0 



{q - ly < g"" , (10.2) 



But the given code is perfect, then the inequality holds. From our construction in Theorem 122, there must 
exist a subsystem code with the given parameters. Since [{d' — 1)/2J > [{d— 1)/2J then the result is a direct 
consequence. □ 

One example to show this Theorem would be Hermitian stabilizer Hamming codes. These codes have 
parameters [[n, n~ 2m, 3]]q, where m > 2, gcd{m, — 1) = 1 and n = '^^^ ~^ . Let q = 2, and m = 4 such that 
gcd{m, — 1) — 1, then n — (g^™ — l)/((7^ ~ 1) = 85. So, there exists a perfect stabilizer Hamming code with 
parameters [[85, 77, 3]]2. Consequently, there must be a subsystem code with parameters [[85, 77 — r,r,> 5]]2 
that beats Hamming bound. Also, the code [[341, 331, 3]]2 gives us the same result. 

The quantum Hamming bound for impure nonbinary stabilizer codes has not been proved for d > 7, 
see [ ]. Of course if the underline stabilizer code beats Hamming bound, obviously, the subsystem codes 
would also beat the Hamming bound. The condition in the theorem can be relaxed. It is not necessarily 
needed the stabilizer code to be perfect but it seems to be hard to find a general theme in this case. 
Lower Bounds for Subsystem Codes. We can also present a lower bound of subsystem code parameters 
known as the Gilbert- Varshamov bound. Our goal is to provide a table of a lower bound on subsystem code 
parameters, for more details see [ ]. 

Theorem 120. Let ¥q be a finite field of characteristic p. If K and R are powers of p such that 1 < KR < q" 
and d is a positive integer such that 

d-i , . 

holds, then an {{n, K, R,> d))g subsystem code exists. 

Proof See [14, Thoerem 7]. □ 



10.3 Pure Subsystem Code Constructions 

Lemma 121. If there exists a pure ((n, K, R, d))q Clifford subsystem code, then there also exists an ((n, R, K, > d))q 
Clifford subsystem code that is pure to d. 

Proof. By Theorem 123, there exist classical codes D C C C F^2 with the parameters {n, q"R/K)q2 and 
{n,q"- / KR)q2. Furthermore, since the subsystem code is pure, we have wt(D^° \ C) — wt(£)^") = d. Let us 
interchange the roles of C and C^", that is, now we construct a subsystem code from C^". The parameters 
of the resulting subsystem code are given by 

{{n, ^\Dm\C^\, ^\Cm\D\, wtp^" \ C^-)))q. (10.3) 

We note that 

. ^ \D^^ \/\C^ ^ I ^ vWTpI = R and 
• ^\C^M\D\ = ^\D^^\/\C\^K. 

The minimum distance d' of the resulting code satisfies d' = wt(D^° \ C^") > wt(Z3-'-°) = d; the claim about 
the purity follows from the fact that wt(I?-'-") = d. □ 

The following Theorem shows that given a stabilizer code, one can construct subsystem codes with the 
same length and distance. Various methods of subsystem code constructions have been shown in the previous 
two chapters. 

Theorem 122. Let q and R be powers of a prime p. If there exists an {{n, K, d))q stabilizer code pure to d' , 
then there exists an {{n, K/ R, R,> d))q subsystem code that is pure to d' . 
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Proof. Let D C C F^" be a classical code generated by the Fp-basis — {zi, Z2, Zs} where d = 
swt{D-^''\D). We know that there exists a stabilizer code Q with parameters {{n, K, d))q that it is pure to 
d' = swt{D). dimQ = \D^^\/\D\ = q'^/p^ = p^^n-s^ ^j^gj.g ^ = pm_ 

Let us construct the additive code C C D^^ by expanding the set Pd as follows 

C = SpanYj,iPD,{Zs+l,Xs+l, ■■■,Zs+r,Xs+r}) 
— <C , . . . , , , Xgjf-i , . . . , Z|.-j_5 , Xs^r ^ ■ 

From Lemma -I, Lemma 10], {xk \ xi) = = (z^ | z^) and {xk \ zi) = 8^,1^ therefore D C C. We notice that 
the code C does not contain its dual C-^" because the elements in C does not commute with each other. The 
dual code C-^" is generated by the set 

C^' = Spanr^{l3DAZr+s+l,Xr+s+l,-;Zn,X„}) 

The symplectic inner product between any two elements in C and C"*"" vanishes. We see that D = COC^' =< 
zi, Z2, Zs >. Therefore, using [ l ! , Theorem 1], there exists a subsystem code Qs = A(E)B such that dim A = 

q"/{\C\\D\)^^^ = (7"/(p2'-+«g^)l/2 ^ prnn-r-s ^ / ^jg^^ ^ ^ \C\/\D\ = {p^'-+'' / p^f'^ ^ p^ ^ R. 

If weight of a codeword c in D^' is d, then either c e C or c € D^'\C. If c e D^'\C, then the subsystem 
code Qs has minimum distance d. If c G C and no other codewords in Z)^=\C has weight d, then the 
subsystem code Qs has minimum distance > d. Let wt{D) be d', since D Q C then the subsystem code Qs 
is pure to c?'. □ 



10.4 Propagation Rules of Subsystem Codes 

In this section we present propagation rules of subsystem code constructions similar to propagation rules 
of stabilizer code constructions. We show that given a subsystem code with parameters [[n, fc, r, d]]^, it is 
possible to construct new codes with either increase or decrease the length and dimension of the code by one. 
Also, we can construct new subsystem codes from known two subsystem codes. 

Recall Lemmas 229 and 102, there exists a subsystem code Q with parameters [[n, fc, r, djjg using the 
Euclidean and Hermitian constructions. The code Q is decomposed into two sub-systems, Q = A® where 
\A\ ~ q'^ and \B\ = (f . From the previous section, if there is an [[n, fc, r, subsystem code, then there are 
two classical codes C,D e F]^^ such that D = C r\C^% X ^ \C\ ^ ^n-k+r y = \D\ = The 
minimum distance of Q is d = min swt(i:'-^=\C). We use this note to show the following Lemmas. 

Let Ci < F^ and C2F^ be two classical codes defined over Fq. The direct sum of Ci and C2 is a code 
C < F2" defined as follows 



C = Ci ® C2 = {w I M e Ci, w e C2}. (10.4) 
In a matrix form the code C can be described as 



C = 



/ X 

V C2 ) 



An [n, fci, di\q classical code Ci is a subcode in an [c, k2, d2]q if every codeword v in C'l is also a codeword 
in C2, hence ki < k2- We say that an [[n, fci, ri, c?i]]g subsystem code Qi is a subcode in an [[n, A;2, r2, d2]]ij 
subsystem code Q2 if every codeword \v) in Qi is also a codeword in Q2 and fci + ri < ^2 + ri. 

Notation. Let q be a power of a prime integer p. We denote by Fg the finite field with q elements. We use 
the notation {x\y) = (xi, . . . , x„|yi, . . . , ?/„) to denote the concatenation of two vectors x and y in F^. The 
symplectic weight of {x\y) S F^" is defined as 

swt(a;|y) = {{x,,yi) ^ (0,0) | 1 < i < n}. 

We define swt(X) — min{swt(a;) | x £ X, a; 7^ 0} for any nonempty subset X ^ {0} of F^". 
The trace-symplectic product of two vectors u— {a\b) and v = {a'\h') in F^" is defined as 



{u\v)s = tTq/p{a' - b-a - b'), 
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where x-y denotes the dot product and tr^/j, denotes the trace from ¥q to the subfield Fp. The trace-symplectic 
dual of a code C C F^" is defined as 

C^' = {i; e F^" I {v\w)s = for all w e C}. 

We define the Euclidean inner product {x\y) — ^iVi ^^^"^ the Euclidean dual of C C F^' as 

= {x e F'; I {x\y) = for all y e C}. 

We also define the Hermitian inner product for vectors x^y in F"2 as {x\y)h = X^ILi ^IVi ^-"^^ t^*^ Hermitian 
dual of C C F^2 as ' 

C^" = {x e F;^ I {x\y)h = for aU y e C}. 



Theorem 123. Let C be a classical additive subcode of F^" such that C ^ {0} and let D denote its subcode 
D = C n C^" . If X — \C\ and y = \D\, then there exists a subsystem code Q — A ® B such that 
i) dim A = g"/(a;y)^/^, 
ii) dimS = [x/yY/"^. 

The minimum distance of subsystem A is given by 

(a) d = swt((C7 + ) - C) = swt(D-L» - C) if 1?^= ^ C; 

(b) d = swt(D-L=>) ifD^^ = C. 

Thus, the subsystem A can detect all errors in E of weight less than d, and can correct all errors in E of 
weight < [(d - 1)/2J. 

Extending Subsystem Codes. We derive new subsystem codes from known ones by extending and 
shortening the length of the code. 

Theorem 124. If there exists an {{n, K, R,d))q Clifford subsystem code with K > I, then there exists an 
{{n + 1, K, R, > d))q subsystem code that is pure to 1. 

Proof. We first note that for any additive subcode X < F^", we can define an additive code X' < F^"+^ by 

X' = {{aa\bO) \ {a\b) G X, a e FJ. 

We have \X'\ = q\X\. Furthermore, if (c|e) e X-^" , then (cajeO) is contained in {X')-^" for all a in Wq, whence 
(X-^^y C [X')-^" . By comparing cardinalities we find that equality must hold; in other words, we have 

ix^^Y^ix')^^. 

By Theorem 123, there are two additive codes C and D associated with an {{n, K, R,d))q Clifford sub- 
system code such that 

|C| - q^^R/K 

and 

\D\ = \Cr\C^'\=q''/{KR). 

We can derive from the code C two new additive codes of length 2rt + 2 over F^, namely C and D' = 
C n (C)-^". The codes C" and D' determine a {{n + 1,K', R' , d'))q Clifford subsystem code. Since 

D' = c" n (C)^' ^ C n {C^'Y 
= (cnc^'^Y; 

we have \D'\ = q\D\. Furthermore, we have \C'\ — q\C\. It follows from Theorem 123 that 

(i) K' ^ g"+7/|C^ = qVVWm = K, 

(ii) R' = {\C'\/\D'\y/'^{\C\/\D\y/'^R, 

(iii) d' = swt((L»')-^° \ C) > swt((L>-L= \ C)') = d. 

Since C" contains a vector (Oa|00) of weight 1, the resulting subsystem code is pure to 1. □ 
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Corollary 125. // there exists an [[n, k, r, d]]q subsystem code with fc > and < r < k, then there exists 
an [[n + l,k,r,> d]]q subsystem code that is pure to 1. 

Shortening Subsystem Codes. We can also shorten the length of a subsystem code and still trade the 
dimensions of the new subsystem code and its co-subsystem code as shown in the following Lemma. 

Theorem 126. If an ({n, K, R,d))q pure subsystem code Q exists, then there is a pure subsystem code Qp 
with parameters {{n — 1, qK, R,> d — l))q. 

Proof. We know that existence of the pure subsystem code Q with parameters ((n, K, R, d))q implies existence 
of a pure stabilizer code with parameters {{n, KR, > d))q for n > 2 and d > 2 from [11, Theorem 2.]. By [97, 
Theorem 70], there exist a pure stabilizer code with parameters {{n — 1, qKR, > d— l))q. This stabilizer code 
can be seen as ((n — l,qKR,0,> d— l))q subsystem code. By using [11, Theorem 2.], there exists a pure 
Fg-linear subsystem code with parameters {{n — 1, qK, R,> d— l))q that proves the claim. □ 

Analog of the previous Theorem is the following Lemma. 

Lemma 127. // an ¥q-linear [[n, k, r, d]]q pure subsystem code Q exists, then there is a pure subsystem code 
Qp with parameters [[n — 1, /c + 1, r. > c? — 1]]^. 

Proof. We know that existence of the pure subsystem code Q implies existence of a pure stabilizer code with 
parameters [[n, fc + r, > d\]q for n > 2 and d > 2 by using [1 I , Theorem 2. and Theorem 5.]. By [')?, Theorem 
70], there exist a pure stabilizer code with parameters [[n — 1, fc + r + 1, > d — l]]g. This stabilizer code can 
be seen as an [[n — 1, fc + r + 1, 0, > d — 1]], subsystem code. By using [ , Theorem 3.], there exists a pure 
Fg-linear subsystem code with parameters [[n — l,fc-|- l,r,> d — l]]q that proves the claim. □ 

We can also prove the previous Theorem by defining a new code Cp from the code C as follows. 

Theorem 128. // there exists a pure subsystem code Q — A® B with parameters ((n, K, R, d))q with n > 2 
and d > 2, then there is a subsystem code Qp with parameters ((n — 1, K, qR, > d — l))g- 

Proof. By Theorem 123, if an ((n, K, R, d))q subsystem code Q exists for if > 1 and 1 < R < K , then there 
exists an additive code C e F^" and its subcode D < F^" such that |C| = q'^R/K and |D| = |C n C^^ \ = 
q"/KR. Furthermore, d = minswt(D-'-'\C). Let w = {wi,W2, ■ ■ ■ ,Wn) and u = (wi, 1*2, . . . , u„) be two 
vectors in F^. W.l.g., we can assume that the code D^^ is defined as 

D^^ = {{u\w) e Ff \w,ue F^}. 

Let W-i = {wi,W2, ■ ■ ■ ,Wn-i) and U-i = U2, . . . , Wn-i) be two vectors in F^*^^. Also, let D^" be the 
code obtained by puncturing the first coordinate of , hence 

D^^ = e Ff -2 I ^_^^u^i e f;'-1}. 

since the minimum distance of 1?-^= is at least 2, it follows that [D^J--' | = [D-^- 1 = K'^\C\ = K'^q'^R/K = q'^RK 
and the minimum distance of Dj;^' is at least — 1. Now, let us construct the dual code of D^' as follows. 

{D^')^' = e Ff -2 I 

(0w_i|0u;_i) e D,w-i,u^i e Vq~^}- 

Furthermore, if £ Dp, then (Oii_i|0?i;_i) G D. Therefore, Dp is a self-orthogonal code and it 

has size given by 

\Dp\^q^--y\D^^\^q--yRK. 
We can also puncture the code C to the code Cp at the first coordinate, hence 

{aw-i\bu-i) e C,a,b £ Fq}. 
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Clearly, D C C and if a = 6 = 0, then the vector (Ou_i|Ow_i) e D, therefore, E Dp. This gives 

us that Dp C Cp. Furthermore, hence |C| — \Cp\. The dual code Cp" can be defined as 



Also, if e = / = 0, then Dp C Cp" , furthermore, 



D^" ^ CpU C^" = {{u-i\w^i) e Ff -2 I (10.5) 
(Ou_i|Ou)_i) G Z?} (10.6) 

Therefore there exists a subsystem code Qp — Ap® Bp. Also, the code D^^ is pure and has minimum 
distance at least d — 1. We can proceed and compute the dimension of subsystem Ap and co-subsystem Bp 
from Theorem 123 as follows. 

(i) Kp = q"-7v/|Cpll^pl - q^-' I VWWKW^^^VRK) - 

(ii) i?p = [\Cp\/\D'p\fl^ = {{q-R/K)/{q^^-^/RK)f/^ = gi?, 

(iii) dp = swt((i:)p)-L= \ Cp) = swt((L>^= \ Cp)) >d-l. 

Therefore, there exists a subsystem cod with parameters ((n — 1, K, qR, > d ~ l))g. 

The minimum distance condition follows since the code Q has d = min swt(_D"^=\C) and the code Qp has 
minimum distance as Q reduced by one. So, the minimum weight of Dp''\Cp is at least the minimum weight 
of {D^"\C)-1 

dp = min swt(Dp^'\Cp) 

> mmswiiD-^'XC) -l = d-l 

If the code Q is pure, then min swt(D^= ) — d, therefore, the new code Qp is pure since dp — min swt(Z?jj-= ) ^ d. 

We conclude that if there is a subsystem code with parameters {{n — 1, K,qR,> d— l))q, using [11, 
Theorem 2.], there exists a code with parameters ((n — 1, qK, R,> d — l))q- □ 

Reducing Dimension. We also can reduce dimension of the subsystem code for fixed length n and minimum 
distance d, and still obtain a new subsystem code with improved minimum distance as shown in the following 
results. 

Theorem 129. // a (pure)¥q-linear [[n,k,r,d]]q subsystem code Q exists for d > 2, then there exists an 
¥q-linear [[n, fc — 1, r, de]]q subsystem code Qe (pure to d) such that de > d. 

Proof. Existence of the [[n, fc, r, d]]q subsystem code Q, implies existence of two additive codes C < F^" and 
D < F2" such that \C\ = q^-k+r and \D\ = |Cn C^=| = Furthermore, d = minswt(i:>-L=\C) and 

D C L>-L' . 

The idea of the proof comes by extending the code D by some vectors from Z?^=\(C U C^'). Let us 
choose a code D^ of size = q\D\. We also ensure that the code D^ is self-orthogonal. Clearly 

extending the code D to D^ will extend both the codes C and to Cg and respectively. Hence 

Ce = q\C\ = and = Ce n C^' . 

There exists a subsystem code Qe stabilized by the code Cg. The result follows by computing parameters 
of the subsystem code Qe = A^® B^. 

(i) K, = g"/V|Ce||i?e| = qn/[[qn+l+r-k)^qn+l-k-r^)l/2 = 
(ii) Re = {\Ce\l\De\f/^ = {{q^^+^ R/ K) / {q-+^ / RK)^'^ = q\ 

(iii) de — swt((Z3e)"'"° \ Ce) > swt((£'^= \ Ce)) = d. If the inequality holds, then the code is pure to d. 
Arguably, It follows that the set {D^'\Ce) is a subset of the set \C because C < Ce, hence the minimum 
weight de is at least d. □ 



Lemma 130. Suppose an [[n, fc, r, d]]q linear pure subsystem code Q exists generated by the two codes C, D < 
F^". Then there exist linear [[n — m, k' ,r' , d']]q and [[n — m,k' + r' — r" ,r" , d']]q subsystem codes with 
k'>k — m,r'>r,0< r" < k' + r' , and d' > d for any integer m such that there exists a codeword of weight 
m m {D^^\C). 
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Proof. [Sketch] This lemma 130 can be proved easily by mapping the subsystem code Q into a stabilizer 
code. By using [ , Theorem 7.], and the new resulting stabilizer code can be mapped again to a subsystem 
code with the required parameters. □ 

Combining Subsystem Codes We can also construct new subsystem codes from given two subsystem 
codes. The following theorem shows that two subsystem codes can be merged together into one subsystem 
code with possibly improved distance or dimension. 

Theorem 131. Let Qi and Q2 be two pure binary subsystem codes with parameters [[rii, fci, ri, di]]2 and 
[[?T-2, ^2, ^2, c?2]]2 for k2 + r2 < ni, respectively. Then there exists a subsystem code with parameters [[ui + 
712 — fc2 — r2, fci + ri — r, r, d]\2, where d > min{di, c?i + o?2 — ^2 ~ ^"2} o.nd < r < fci + ri. 

Proof. Existence of an [[nt, ki,ri, di]]2 pure subsystem code Qi for i e {1,2} , implies existence of a pure 
stabilizer code Si with parameters [[ui, ki + ri, di]]2 with k2 + r2 < ni, see [ LI]. Therefore, by [34, Theorem 8.], 
there exists a stabilizer code with parameters [[ni + 712 — ^2 — f2, ki+ri, d]]2, d > min{di, di + ^2 ^ ^2 ~ 1^2}- 
But this code gives us a subsystem code with parameters [[ni + n2 — k2 — r2,ki + ri — r, r, > d]]2 with 
k2 + r2 < ni and < r < fci + that proves the claim. □ 



Theorem 132. LetQi andQ2 be two pure subsystem codes with parameters [[n,ki,ri,di]]q and [[n, k2,r2, d2]]q, 
respectively. //Q2 Q Qi, then there exists an [[2n, ki+k2+ri+r2—r, r, d]]g pure subsystem code with minimum 
distance d > min{c?i, 2^2} and < r < ki + k2 + ri + r2 ■ 

Proof. Existence of a pure subsystem code with parameters [[n, ki,ri, di]]q implies existence of a pure stabilizer 
code with parameters [[n, ki + ri, di]\q using [1 1 , Theorem 4.]. But by using [07, Lemma 74.], there exists a 
pure stabilizer code with parameters [[2n, fci + fc2 + ri + r2, d]]q with d > min{2(i2, c?i}. By [ ' , Theorem 2., 
Corollary 6.], there must exist a pure subsystem code with parameters [[2n, fci + fc2 + ri + r2 — r, r, d]]q where 
d > min{2c?2, di} and < r < fci + fc2 + ri + r2, which proves the claim. □ 

We can recall the trace alternative product between two codewords of a classical code and the proof 
of Theorem 132 can be stated as follows. 

Lemma 133. Let Qi and Q2 be two pure subsystem codes with parameters [[n, fci, ri, di]]q and [[n, k2, r2, d2]]q, 
respectively. Lf Q2 C Qi, then there exists an [[2n, fci + fc2,ri + r2,(i]]q pure subsystem code with minimum 
distance d > min{c?i, 2^2}- 

Proof. Existence of the code Qi with parameters [[n, Ki, Ri, di]]q implies existence of two additive codes Ci 
and A for i £ {1, 2} such that |C^| = q"R^/K, and | A| = |C U C^- 1 = q"/R^K,. 

We know that there exist additive linear codes Di C Z)/^", Di C d, and Di C C/^". Furthermore, 
A = n C/-" and di = wtiD^^Xd). Also, d = and \D\ = 

Using the direct sum definition between to linear codes, let us construct a code D based on Di and D2 as 

D = {{u,u + v) I u e ZJi,!- e D2} < F^?. 

The code D has size of = g2ri-(ri+r2+fci+fc2)=|-Di||£'2|_ Also, we can define the code C based on the codes 
Ci and C2 as 

C = {{a,a + b) I ae Ci,6e C2} <F2?. 
The code C is of size |C| = |Ci||C2| = gSn+n+ra-fci-fes^ gut the trace-alternating dual of the code D is 

D^- = {{u' + v'\,v') I u' e D^^v' e A^»}. 
We notice that {u' + v' ,v') is orthogonal to [u,u + v) because, from properties of the product, 

{{u,U + v)\{u +v' ,v'))a = {u\u +v')a + {u + v\v')a 

= 

holds for u G Di,v G D2, u' e D^"" , and v' e 

Therefore, D C D^" is a self-orthogonal code with respect to the trace alternating product. Furthermore, 
C-L" = {(a' + b',b') I a' G C^%b' e C^°}. Hence, CDC^" = {{a,a + b)n{aa + b',b')} = D. Therefore, there 
exists an Fg-linear subsystem code Q = B with the following parameters. 
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K = \A\^q^-/{\C\\D\f'^ 

^2n 



v'(g2»i?ii?2//^ii^2)(g2»/Kiir2i?ii?2) 



^ q2n+ri+r2 — ki—k2q2n—ri -r2 -fei — feg 
qk^k2 ^ K1K2. 



ii) i?=(M)i/2^i?,i?2. 

iii) the minimum distance is a direct consequence. 

□ 



Theorem 134. If there exist two pure subsystem quantum codes Qi and Q2 with parameters [[ni,ki,ri,di]]q 
and [[n2; fc2, r2, d2]](j7 respectively. Then there exists a pure subsystem code Q' with parameters [[ni +n2, ki + 
k2 + ri+r2- r, r, > mm{di,d2)]]q. 

Proof. This Lemma can be proved easily from [ , Theorem 5.] and [')7, Lemma 73.]. The idea is to map 
a pure subsystem code to a pure stabilizer code, and once again map the pure stabilizer code to a pure 
subsystem code. □ 

Theorem 135. If there exist two pure subsystem quantum codes Qi and Q2 with parameters [[ni,ki,ri,di]]q 
and [[n2, k2, ^2, ^2]]^, respectively. Then there exists a pure subsystem code Q' with parameters [[ni +n2, k\ + 
k2,ri +r2,> min(rfi,d2)]]g. 

Proof. Existence of the code Qi with parameters [[n^ Ki, Ri,di\\q implies existence of two additive codes Ci 
and Di for i e {1, 2} such that \Ci\ = q^Ri/K, and |A| = \C\JC^^\= q'^/RiKi. 
Let us choose the codes C and D as follows. 

C = Ci ® C2 ^ {uv \ V e Ci,v e C2}, 

and 

D ^ Di ® D2 ^ {ah \ a (E Di,b (E C2}, 

respectively. From this construction, and since Di and D2 are self-orthogonal codes, it follows that D is also 
a self-orthogonal code. Furthermore, Di C Ci and D2 C C2, then 



Di®D2C Ci ® C2, 



hence D C C. The code C is of size 



and D is of size 



On the other hand. 



\C\ = 1(7^11(721=9^"^'''"^^"''^^''"'^^^^^''^^''^^ 
= q'''q'''RiR2/KiK2 



= q'''q^-/RiR2K,K2. 



Furthermore, CnC^^ = {d © C2) n ((72^= n C^') = D. 

Therefore, there exists a subsystem code Q = A (S) B with the following parameters. 
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^(g»i+"2i?ii?2/iflX2)(g"i+"V^1^2i?li?2) 

„ni+n2 



+n2+ri+r2 — ki—k2 o"l +"2 — ri — r2 — fci — fc2 



^ qni-rii'2-ri it* 2 — r^l^ 1^2 q" 

= q'^-'^- = K,K2 = \A,\\A 
ii) 



iii) the minimum weight of D-^'\C is at least the minimum weight of D^''\Ci or £)^°\C2. 

d = min{swt(i:>j^'\Ci),(L'^^AC2)} 
> minjdi, ^2}- 



□ 



Table 10.1: Existence of subsystem propagation rules 



n \ k 


k-1 


k 


k+1 


n-1 


[r + 2,d~l]q 


[<r + 2,d]g, [r + l,d~l]. 


[r,d~l]g 


n 


[r + l,d]„ [r + l,>d]g 


[r,d]g -> [< r, > d]q 


[r-l,d]g 


n+1 


[> r, > d]g 


[> r,d], , [r,>d]g 





Theorem 136. Given two pure subsystem codes Qi andQ2 with parameters [[ni, ki,ri, di]]q and [[112, k2,r2, d2]]q, 
respectively, with k2 < ni. An [[ni + 712 — ^2,^1 + ri + r2 ~ r,r,d]]q subsystem code exists such that 
d > min{(ii, di -f c?2 — ^2} and < r < ki + ri + r2. 

Proof. The proof is a direct consequence as shown in the previous theorems. □ 



Theorem 137. If an {{n, K, R,d))qm pure subsystem code exists, then there exists a pure subsystem code with 
parameters {{nm, K, R,> d))q. Consequently, if a pure subsystem code with parameters {{nm, K, R,> d))q 
exists, then there exist a subsystem code with parameters {{n, K, R,> \d/m\))qm .. 

Proof. Existence of a pure subsystem code with parameters {{n, K, R,d))qm implies existence of a pure 
stabilizer code with parameters {{n, KR,d))qm. using [11, Theorem 5.]. By [;)7, Lemma 76.], there exists a 
stabihzer code with parameters {{nm,KR,> d))q. From [11, Theorem 2,5.], there exists a pure subsystem 
code with parameters {{nm, K, R,> d))q that proves the first claim. By [97, Lemma 76.] and [ , Theorem 
2,5.], and repeating the same proof, the second claim is a consequence. □ 
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Table 10.2: Upper bounds on subsystem code parameters using linear programming, q — 2 



n/k 


k=l 


k=2 


k=3 


k=4 


k=5 


k=6 


k=7 


k=8 


k=9 


k=10 


k=ll 


k=12 


n=6 


(5.1) , 

(3.2) , 

(1.3) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 
















n=7 


(6.1) , 

(4.2) , 

(2.3) , 


(5.1) , 

(3.2) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 














n=8 


(7.1) , 

(5.2) , 

(3.3) , 


(6.1) , 

(4.2) , 

(2.3) , 


(5.1) , 

(3.2) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 












n=9 


(8.1) , 

(6.2) , 

(4.3) , 

(2.4) , 


(7.1) , 

(5.2) , 

(3.3) , 


(6.1) , 

(4.2) , 

(2.3) , 


(5.1) , 

(3.2) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 










n=10 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 


(2,1), 


(1,1), 










(7,2), 


(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 














(5,3), 


(4,3), 


(3,3), 


(1,3), 




















(3,4), 


(2,4), 






















n=ll 


(10,1), 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 


(2,1), 


(1,1), 








(8,2), 


(7,2), 


(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 












(6,3), 


(5,3), 


(4,3), 


(3,3), 


(1,3), 


















(4,4), 


(3,4), 


(2,4), 






















(2,5), 
























n=12 


(11,1), 


(10,1), 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 


(2,1), 


(1,1), 






(9,2), 


(8,2), 


(7,2), 


(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 










(7,3), 


(6,3), 


(5,3), 


(4,3), 


(3,3), 


(1,3), 
















(5,4), 


(4,4), 


(3,4), 


(1,4), 




















(3,5), 


(1,5), 






















n=13 


(12,1), 


(11,1), 


(10,1), 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 


(2,1), 


(1,1), 




(9,2), 


(9,2), 


(8,2), 


(7,2), 


(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 








(8,3), 


(7,3), 


(6,3), 


(5,3), 


(4,3), 


(3,3), 
















(6,4), 


(5,4), 


(4,4), 


(3,4), 


(1,4), 


















(4,5), 


(3,5), 
























(1,6), 
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Continued 



Table 10.2. 



n/k 


k=l 


k=2 


k=3 


k=4 


k=5 


k=6 


k=7 


k=8 


k=9 


k=10 


k=ll 


k=12 


n=14 


("1 1 ^ 


('19 1'; 


nil") 


('1 n 1 "I 




(R 1 1 


(7 1 1 


('fi 1 1 


('5 1 1 


(d 1 1 


('3 1 1 


(9 1 1 




n n 9"! 


(_lU,Zj, 




(R 9"! 


(■7 21 


Cfi 21 


('5 21 


(d 21 


('3 21 


(9 21 


(] 21 






I'Q ^"l 




(7 


(P, 




("4 31 


(9 31 














I ' i^Jj 


('fi 4"; 


d^ 


('4 4') 


('3 41 






















C9 ^"l 














































n=15 






('19 1'; 


('1 1 1 "1 


I'm 11 


('Q 1 1 


('S 1 1 


('7 1 1 


('fi 1 1 


('5 1 1 


('4 1 1 


('3 1 1 




("19 9"! 




(_lU,Zj, 


I'Q 9"! 


(R 21 


C7 21 


('6 21 


('5 21 


(d 21 


('3 21 


(9 21 


('1 21 








('8 ■^'i 


('7 ■^'l 


/'R 31 


('5 31 


(d 31 


('2 31 














(7 A\ 


l,D,4j, 


(OA), 


/■/I /II 






















('4 ^"l 
























l'J,Oj, 






















n=16 


("1 1 "I 






(^1 1 1 "1 


('1 1 1 1 


('in 11 


('q 1 1 


('S 1 1 


('fi 1 1 


('fi 1 1 


('5 1 1 


('4 1 1 






n 9 9'; 


('119'; 


('in 9') 


I'Q 91 


(R 91 


C7 91 


(^fi 91 


('5 91 


('4 91 


/■■^ 91 


(9 91 






^iu,o;. 


('Q 


("S 


('7 31 


('fi 31 


('5 31 


('4 31 


('9 31 










(Q 4-'] 


(R 4) 


(7 d) 


(p d) 


f5 41 


C4 41 


(9 41 














(7 "S"! 






(d K\ 


('1 51 






















('9 fi"; 














































n — 1 7 




UO,J-j, 


('1 4 1 ~> 




('1 1 1 1 


('in 11 


('mil 


('Q 1 1 


(R 1 1 


('7 1 1 


('5 1 1 


('4 1 1 






n 'H 9'; 


('19 9'; 


("1 1 9") 


I'Q 91 


('Q 91 


(R 91 


(7 91 


('fi 91 


('5 91 


(d 91 


('3 91 








('1 n 'H'; 


("Q X\ 


(R 31 


('7 31 


('fi 31 


('5 31 


('4 31 


('1 31 








(Q 4^ 


I'Q 4'; 


(R d^ 


("7 41 


Cfi 41 


C5 41 


('4 41 


C2 41 














(7 ^) 


('fi Ft) 




('3 ,51 


















(6,6), 


(5,6), 


(4,6), 


(1,6), 




















(4,7), 


(1,7), 






















n=18 


(17,1), 


(15,1), 


(15,1), 


(13,1), 


(13,1), 


(12,1), 


(11,1), 


(9,1), 


(8,1), 


(8,1), 


(6,1), 


(5,1), 




(13,2), 


(14,2), 


(12,2), 


(11,2), 


(11,2), 


(10,2), 


(9,2), 


(8,2), 


(7,2), 


(6,2), 


(5,2), 


(4,2), 




(13,3), 


(12,3), 


(11,3), 


(10,3), 


(9,3), 


(8,3), 


(7,3), 


(6,3), 


(5,3), 


(3,3), 


(1,3), 






(11,4), 


(10,4), 


(9,4), 


(8,4), 


(7,4), 


(6,4), 


(5,4), 


(4,4), 


(1,4), 










(9,5), 


(8,5), 


(7,5), 


(6,5), 


(5,5), 


(2,5), 
















(7,6), 


(6,6), 


(4,6), 


(3,6), 




















(5,7), 


(4,7), 
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Table 10.3: Upper bounds on subsystem code parameters using linear programming, q — 3 



n/k 


k=l 


k=2 


k=3 


k=4 


k=5 


k=6 


k=7 


k=8 


k=9 k=10 k=ll k=12 


n=4 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 














n=5 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 












n=6 


(5.1) , 

(3.2) , 

(1.3) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 










n=7 


(4.1) , 

(4.2) , 

(2.3) , 


(4.1) , 

(3.2) , 

(1.3) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 








n=8 


(5.1) , 

(5.2) , 

(3.3) , 

(1.4) , 


(5.1) , 

(4.2) , 

(2.3) , 


(5.1) , 

(3.2) , 

(1.3) , 


(4.1) , 

(2.2) , 


(3.1) , 

(1.2) , 


(2,1), 


(1,1), 






n=9 


(6,1), 


(5,1), 


(6,1), 


(4,1), 


(4,1), 


(3,1), 


(1,1), 


(1,1), 






(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 










(3,3), 


(3,3), 


(2,3), 


(1,3), 














(2,4), 


(1,4), 
















n=10 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 


(2,1), 


(1,1), 




(7,2), 


(6,2), 


(5,2), 


(4,2), 


(3,2), 


(2,2), 


(1,2), 








(5,3), 


(4,3), 


(3,3), 


(2,3), 


(1,3), 












(3,4), 


(2,4), 


(1,4), 
















(1,5), 


















n=ll 


(10,1), 


(9,1), 


(7,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(2,1), 


(2,1), 




(7,2), 


(7,2), 


(5,2), 


(5,2), 


(4,2), 


(3,2), 


(1,2), 


(1,2), 






(6,3), 


(5,3), 


(4,3), 


(3,3), 


(2,3), 


(1,3), 










(4,4), 


(3,4), 


(2,4), 


(1,4), 














(2,5), 


(1,5), 
















n=12 


(10,1), 


(9,1), 


(9,1), 


(8,1), 


(7,1), 


(6,1), 


(5,1), 


(4,1), 


(3,1), 




(8,2), 


(6,2), 


(4,2), 


(4,2), 


(3,2), 


(2,2), 


(2,2), 


(2,2), 


(1,2), 




(6,3), 


(6,3), 


(5,3), 


(4,3), 


(3,3), 


(2,3), 










(5,4), 


(4,4), 


(3,4), 


(2,4), 


(1,4), 












(3,5), 


(2,5), 


(1,5), 
















(1,6), 



















10.5 Conclusion and Discussion 

We have established a number of subsystem code constructions. In particular, we have shown how one can 
derive subsystem codes from stabilizer codes. In combination with the propagation rules that we have derived, 
one can easily create tables with the best known subsystem codes. Table 10.1. shows the propagation rules 
of subsystem code parameters and what the rules are to derive new subsystem codes from existing ones. We 
have constructed tables of subsystem code parameters over binary and finite fields. 

Tables 10.2 and 10.3 present upper bounds on subsystem code parameters using the linear programming 
bound implemented using MAGMA[31] and Matlab 0.7 programs, for small code lengths. As a future research, 
designing the encoding and decoding circuits of subsystem codes will be conducted as well as deriving tables 
of upper bounds for large code lengths. Finally, it will be interesting to derive sharp upper and lower bounds 
on subsystem code parameters. 



Part III 

Quantum Convolutional Codes 
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CHAPTER 1 1 



Quantum Convolutional Codes 



11.1 Introduction 

Quantum information is sensitive to noise and needs error correction and recovery strategies. Quantum 
block error-correcting code (QBC) and quantum convolutional codes (QCC) are means to protect quantum 
information against noise. The theory of stabilizer block error-correcting codes is widely studied over binary 
and finite fields, see for example [20, 34, 97, 152] and references therein. Quantum convolutional codes (QCC) 
have not been studied well over binary and finite fields. There remain many interesting and open questions 
regarding the properties and the usefulness of quantum convolutional codes. At this point in time, it is not 
known if quantum convolutional codes offer a decisive advantage over quantum block codes. However, it 
appears that quantum convolutional codes are more suitable for quantum communications. 

In this chapter, we extend the theory of quantum convolutional codes over finite fields generalizing some of 
the previously known results. After a brief review of previous work in quantum convolutional codes, we give 
the necessary background in classical and quantum convolutional codes in Sections 11.3 and 11.4. We reformu- 
late the necessary terminology of the theory of quantum convolutional codes. Then in the next two chapters, 
we construct families of quantum convolutional codes based on classical codes [15]. Sections 11.4,11.5, 11.6, 
and the next chapter are based on a joint work with P.K. Sarvepalli and A. Klappenecker, for further details, 
see our companion paper [1 "]. 

11.2 Previous Work on QCC 

We review the previous work on quantum convolutional codes. There have been examples of quantum 
convolutional codes in literature; the most notable being the ((5,1,3)) code of OUivier and Tillich, the 
((4, 1, 3)) code of Almeida and Palazzo and the rate 1/3 codes of Forney and Guha. 

• Chau initiated the early work in quantum convolutional codes [38, 39]. However, there are negative argu- 
ments about his work [ ] and many authors are divided whether his codes are truly quantum convolutional 
codes or not. 

• OUivier and Tillich developed the stabilizer framework for quantum convolutional codes. They also ad- 
dressed the encoding and decoding aspects of quantum convolutional codes [139, 138, 141, 140]. Further- 
more, they provided a maximum likelihood error estimation algorithm. They showed, as an example, a 
code of rate k/n — 1/5 that can correct only one error. 

• Almedia and Palazzo constructed a concatenated convolutional code of rate 1/4 with memory m = 3; i.e. 
a ((4,1,3)) code as shown in [4()]. Their construction is valid only a specific code parameter. It would be 
interesting if their work can be generalized, if possible, to any two arbitrary concatenated codes. 
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• Kong and Parhi constructed quantum convolutional codes with rates l/{n + 1) and 1/n from a classical 
convolutional codes with rates 1/n and l/{n — 1), see [1U8, 109]. Their work was not a general approach 
for any quantum convolutional codes, with arbitrary rate k/n and fc > 1. 

• Forney and Guha constructed quantum convolutional codes with rate 1/3 [tiO]. Also, together with Grassl, 
they derived rate (n — 2)/n quantum convolutional codes [59]. They gave tables of optimal rate 1/3 
quantum convolutional codes and they also constructed good quantum block codes obtained by tail-biting 
convolutional codes. 

• Grassl and Rotteler constructed quantum convolutional codes from product codes. They showed that 
starting with an arbitrary convolutional code and a self-orthogonal block code, a quantum convolutional 
code can be constructed [s(J]. 

• Recently, Grassl and Rotteler [82] gave a general algorithm to construct quantum circuits for non-catastrophic 
encoders and encoder inverses for channels with memories. Unfortunately, the encoder they derived is for 
a subcode of the original code. 

It is apparent from the discussion above that several issues need to be addressed regarding the efficiency 
of the decoding algorithms and encoding circuits for quantum convolutional codes. Somewhat surprisingly 
there has been no work done on the bounds of quantum convolutional codes. In this chapter we address this 
problem partially by giving a bound for a class of QCC. This bound is somewhat similar to the generalized 
Singleton bound for classical convolutional codes. 

Motivation In this chapter we give a straightforward extension of the theory of quantum convolutional 
codes to nonbinary alphabets. We give analytical constructions for quantum convolutional codes unlike the 
previous work where most of the codes were constructed by either heuristics or computer search. In many 
cases, we give the exact free distance of the quantum convolutional codes. The main contributions of our 
work are that we: 

• establish bounds on a class of quantum convolutional codes similar to generalized Singleton bound for 
classical convolutional codes. 

• provide the necessary definitions and terminology of stabilizer formalization of convolutional codes, free 
distance, error bases. 

• construct families of quantum convolutional codes based on classical block codes - such as Reed-Solomon 
(RS), BCH, and Reed-Muller codes. 

11.3 Background on Convolutional Codes 
11.3.1 Overview 

Classical convolutional codes appeared in a series of seminal papers in the seventies of the last century. The 
algebraic structure of these codes was initiated by Forney [57, 58] and Justesen [13] ]. Cyclic convolutional 
codes were first introduced by Piret [140, 145, 144] and generalized by Roos [154]. Using this construction, 
one family of cyclic convolutional codes based on Reed-Solomon codes was derived [14()]. It was shown that 
any convolutional code has a canonical direct decomposition into subcodes; and hence it has a minimal 
encoder. 

The subject became active, once again, by a series of recent papers by Gluesing-Luerssen al et. in [65, 66, 
64] and by Rosenthal [157]. Cyclic convolutional codes are defined as left principle ideals in a skew-polynomial 
ring. Also, a subclass of cyclic convolutional codes is described where the units of the skew polynomial ring 
is used. 

Unit memory convolutional codes are an important class of codes that is appeared in a paper by Lee [121]. 
He also showed that these codes have large free distance df among other codes (multi- memory) with the same 
rate. Upper and lower bounds on the free distance of unit memory codes were derived by Thommesen and 
Justesen [18G], confirming superiority of these codes in comparison to other convolutional codes. Since then, 
there were some attempts to construct unit memory codes by using computer search and by puncturing 
existing convolutional codes. For an algebraic method to construct unit memory convolutional codes, classes 
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of these codes were derived by Pket based on RS codes [J -Ki] and by Hole based on BCH codes Also, a 
class of unit memory codes defined using circulant sub-matrices was derived by Justesen et. al [92]. 

Bounds on convolutional codes have been studies as well. Rosenthal al et. showed a generalized Singleton 
bound and MDS convolutional codes [156, 155, 157]. 



11.3.2 Algebraic Structure of Convolutional Codes 

We give some background concerning classical convolutional codes, following [ '-'•, Chapter 14] and [120]. 

Let ¥q denote a finite field with q elements. An {n, k, 6)q convolutional code C is a submodule of Fg[i3]" 
generated by a right-invertible matrix G{D) = {gij) G ¥q[D\^'^"' , 

C^{n{D)G(D)\u{D)e¥q[Df}, (11.1) 
such that = max{deg7 | 7 is a fc-minor of G{D)} =: 5, 

where vi = maxi<j<„{deg (7^^}. We say 5 is the degree of C. The memory /i of G{D) is defined as ^ = 
maxi<i<fcZ^i. The weight wt(u(Z))) of a polynomial v{D) in Fq[D] is defined as the number of nonzero 
coefficients of v{D), and the weight of an element u{D) G Fg[_D]" is defined as wt(u(£))) = wt(ui(D)). 
The free distance df of C is defined as df = wt(C) = min{wt(7i) | u € C, u 7^ 0}. We say that an {n,k,d)q 
convolutional code with memory fi and free distance df is an (n, fc, S; fj,, df)q convolutional code. 
Let N denote the set of nonnegative integers. Let 

Tq — {v. N ^ I all but finitely many coefficients of v are 0}. (11-2) 

We can view v Cz Tq as a sequence {vi — v{i)}i>Q of finite support. We define a vector space isomorphism 
cr: Fq[£']" Tq that maps an element u{D) = {ui{D), . . . ,Un{D)) in ¥q[D]" to the coefficient sequence 
of the polynomial X^fcTo^ ^^^^ element in ¥q[D]" is mapped to its interleaved coefficient 

sequence. Frequently, we will refer to the image (t{C) — {cr(c) | c S C} of a convolutional code (11.1) again 
as C, as it will be clear from the context whether we discuss the sequence or polynomial form of the code. 

Let G{D) = Go + GiD H h G^D^\ where Gi e F^^" for < i < ^. We can associate to the generator 

matrix G{D) its semi-infinite coefficient matrix 




(11.3) 



If G{D) is the generator matrix of a convolutional code G, then one easily checks that a{G) = FgG. 

In the literature, convolutional codes are often defined in the form {p{D)G' {D) \ p{D) S Fq(D)''}, where 
G'{D) is a matrix of full rank in F^^"[Z?]. In this case, one can obtain a generator matrix G{D) in our sense 
by multiplying G'{D) from the left with a suitable invertible matrix U{D) in ¥q^'^{D), see [St^]. 

Euclidean and Hermitian Inner Products. We define the Euclidean inner product of two sequences u 
and V in Tq by {u\v) = X^ieN '"j'^i: ^^^^ the Euclidean dual of a convolutional code G C Fg by G"*" — {u G 
Tq\ {u\v) =0 for all V e G}. A convolutional code G is called self-orthogonal if and only if G C G^. It is 
easy to see that a convolutional code G is self-orthogonal if and only if GG^ — 0. 

Consider the finite field ¥q-2 . The Hermitian inner product of two sequences u and v in Tq2 is defined as 
{u I v)h = EieN We have G^'^ = {u e Tq2 \{u\v)h^O for all v € G}. Then, G C C^" if and only if 

GG^ = 0, where the Hermitian transpose f is defined as (a^)^ = (ajj. 

Delay Operator. We can define the delay operator as a shift operator in the codeword to the left or right. 
Let gi{D) be a row in the infinite generator polynomial G{D), the right j — th shift is given by 



D^g,{D)^g,+,{D). 



(11.4) 
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11.3.3 Duals of Convolutional Codes 

The dual of a convolutional code plays an important role in constructing quantum convolutional codes. 
Therefore, we first introduce the dual of a convolutional code. We can define the inner product between two 
sequences v and w as 

(v|w) =^(v,|w,). (11.5) 

Recall that every codeword in C is equivalent to a sequence. The dual convolutional code is the set of 
all sequences that are orthogonal to every sequence v in C . 

Lemma 138 (Dual of Convolutional Code). Let k/n be the rate of a convolutional code C generated by a 
semi-infinite generator matrix G. Also, let [n~k)/n be the rate of dual of a convolutional code generated 
by the semi-infinite generator matrix , such that 

Gq Gi ■ ■ ■ Gjn 

G = \ Go Gi ■ ■ ■ Gm 



and 

Gi ••• Gi^ I (n.6) 

where Gi are k x n matrices, for all < i < m. Then G{G^)'^ — 0. 

Proof, see [!> l, Theorem 2.63]. □ 

A convolutional code G is said to be self-orthogonal if C C G-^. Clearly, a convolutional code is self- 
orthogonal if and only if GG^ — 0. We can also define a relation between the polynomial generators matrices 
G{D) and G^{D). If G^^D) = G^^ + G^^_^D + ■■■ + G^D^^-^ + G^D""^, then G{D){Gi{D))^ = 
(see [0] , Theorem 2.64]). The following Lemma gives the relation between the total constraint lengths of a 
code and its dual code. 

Lemma 139. The convolutional code G is self-orthogonal if and only if 

G{D)G{D-^f = Q (11.7) 

Proof Let the polynomial G{D) = Go + GiD + . . . + GmD™ and its dual polynomial G^{D) = G^ + 
G^D + . . . + G^^^D™ be the polynomial generator matrices of C and its dual, respectively. We know that 
G{D)Gi{D)^ = 0. But, 

Gi{D) = Gi^+Gi^_,D + --- + GiD^^-^+G^D^'- 

= iGi±D-"'^ + Gi^_^D^-"'^ +■■■ + GiD-^ + G^)D"'^ 

= G^{D-^)D"'^. (11.8) 

Therefore, G{D)G^{DY = G{D)G^{D-^Y D""^ = 0. So, G{D)G^{D-^Y = 0. Let C < be a self- 
orthogonal convolutional code, we know that the elements of G{D) can be generated from the elements of 
G^{D). Since, G{D)G^{D-^Y = 0, it follows that G{D)G{D-^Y = 0- 

Conversely, if G{D)G{D~^)^ = 0, then it implies that the convolutional code generated by G{D) must 
be a subcode of G-^{D). Therefore, C must be a self-orthogonal convolutional code. □ 

We can also formulate the above condition in a slightly different manner as follows. Let G{D) = [gij[D)]. 
Then G(D)G{D-^Y = ELi So, for a self-orthogonal code YJLi 9^(^)9 jil^'^) = 0' ^^r 

all I < i,j < k. Alternatively, if 

G{D)^[g,{D),g,iD),...,g,{D)f, (11.9) 
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where gi{D) = [g,i{D), gi2{D), . . .,gin{D)], then 

GiD)GiD-'f = [g,iD)g,{D-Y] = 0, (11.10) 

i.e. gi{D)gj{D^^Y^ = Cross- Correlation. It is also possible to derive these conditions in terms of the 
cross-correlations between codewords of a convolutional code as in [59]. Let us define the Euclidean inner 
product between two (Laurent) series g{D) = J2iez9i^^ ^(^) = J2iez^i^^ ^'^^ di^hi € as 

{g{D)\h{D)) ^Y.9^h^- (11-11) 

If the series are over Fq2 , we can define their Hermitian inner product as 

{g{D)\h{D))u^Y.9'i^^- (11-12) 

If v(Z?) is equal to [vi{D),vi{D), . . . ,Vn{D) \ Vi{D) E ¥q{{D))] then we can define the Euclidean inner 
product with w(£') = [wi{D),wi{D), . . . , w„(_D)] as 

n 

{^{D)\w{D))^Y.('^,{D)\wm)- (11-13) 

1=1 

Let us define the conjugate of g{D) E ¥q2{{D)) as g^{D) — J2iez9i^^- Then, we can also define the 
Hermitian inner product of 'v(D) and 'w(D) as 

n n 

{v{D)\w{D)), = J2{v,{D)\w.{D)), = Y.(^,{D)\wl{D)). (11.14) 

i=l i=l 

Now, we define the cross-correlation between the sequences v(D) and w(D) as 

i?vw(i?) = ^(v(i^)|i^V(i?))i^' =^i?vw,*i?'. (11.15) 

If C is self-orthogonal, then i?vw(^) = for any \-{D),w{D) E C. 
Lemma 140. B.^^{D) = v{D)v<f{D-^)'^ 

Proof. The proof is a direct consequence from definition of i?vw(-D), Equation (11.15). 
R^^{D) = J2(v{D)\D'^v{D))D' 

n 

= EE(^^(^)i^'^^(^))^' 

n n 

= E E = E E ^,Dw-^w,^,D^ 

n n 

= y^{D)^{D-^f (11.16) 

□ 

If v(£)) is orthogonal to w(_D), then Rv^{D) — 0. We can also define the cross-correlation with respect 
to the Hermitian inner product as 
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= v{D)vf\D-^). (11-17) 
If a code C is Hermitian self-orthogonal, then R!^^{D) — for any v{D),w{D) G C. 

Lemma 141. Let G{D) he a minimal encoder of a convolutional code C with total constraint length 5. Then 
the dual encoder G^{D) of has also a total constraint equals to 6 

Proof. See for example [ , , Theorem 7] □ 



11.4 Quantum Convolutional Codes 

The state space of a q-ary quantum digit is given by the complex vector space C. Let {\x) | x G F^} denote a 
fixed orthonormal basis of C^, called the computational basis. For a, 6 G F^, we define the unitary operators 

X{a)\x) ^\x + a) and |x) = exp(27ritr(&x)/p) |x) , (11.18) 

where the addition is in Fg, p is the characteristic of ¥q, and tr(a;) = + + • • • + a;'' is the absolute trace 
from ¥q to ¥p. The set £ = {X{a), Z{b) \a,b G ¥q} is a basis of the algebra of qx q matrices, called the error 
basis. 

A quantum convolutional code encodes a stream of quantum digits. One does not know in advance how 
many qudits i.e., quantum digits will be sent, so the idea is to impose structure on the code that simplifies 
online encoding and decoding. Let n, m be positive integers. We will process n + m qudits at a time, m 
qudits will overlap from one step to the next, and n qudits will be output. 

For each t in N, we define the Pauli group Pt = {M\M G as the group generated by the 

{t + l)n-|-m-fold tensor product of the error basis £. Let / = -'^(0) be the q x q identity matrix. For 
j,j G N and i < j, we define the inclusion homomorphism tij : Pi Pj by Lij{M) — M ® We have 

i-iiiM) = M and iik = ijk ° i-ij for i < j < k. Therefore, there exists a group 

Poo =hm(P„ty), (11.19) 

called the direct limit of the groups Pi over the totally ordered set (N, <). For each nonnegative integer 
i, there exists a homomorphism Li: Pi Poo given by Li(Mi) = Mi (g) /®°° for Mi G Pi, and Li = lj o tij 
holds for all i < j. We have Poo — Ui^o '^ii^i)' P^l differently. Poo consists of all infinite tensor products of 
matrices in {M | M G £) such that all but finitely many tensor components are equal to /. The direct limit 
structure that we introduce here provides the proper conceptual framework for the definition of convolutional 
stabilizer codes; see [i 'i->] for background on direct limits. 



n m 



M 






M 



n — k 



t times / 



We will define the stabilizer of the quantum convolutional code also through a direct limit. Let 5*0 
be an abelian subgroup of Pq. For positive integers t, we recursively define a subgroup St of Pt by St = 
{N (g) J®", /®*" (g) M\N e St-i,M G So).'Let Zt denote the center of the group Pt. We will assume that 
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51) (g) M and N (g) I***" commute for all N, M G 5*0 and all positive integers t. 

52) StZt/Zt is an {t + l){n — fc)-dimensional vector space over F^. 

53) St n Zt contains only the identity matrix. 

Assumption SI ensures that St is an abelian subgroup of Pt, S2 implies that St is generated by i + 1 shifted 
versions of n — A; generators of Sq and all these {t + l)(n — k) generators are independent, and S3 ensures 
that the stabilizer (or +1 eigenspace) of St is nontrivial as long as fc < n. 
The abelian subgroups St of Pt define an abelian group 

S = lim(5,, = (tt(/®*" (g)M)\t>0, M e 5*0) (11.20) 
generated by shifted versions of elements in 5*0. 

Definition 142. Suppose that an abelian subgroup Sq of Pq is chosen such that SI, S2, and S3 are satisfied. 
Then the +l-eigenspace of 5 = lim(5i, Lij) in (^^g defines a convolutional stabilizer code with parameters 

[{n,k,m)]g. 

In practice, one works with a stabilizer St for some large (but previously unknown) t, rather than with S 
itself. We notice that the rate k/n of the quantum convolutional stabilizer code defined by S is approached 
by the rate of the stabilizer block code St for large t. Indeed, St defines a stabilizer code with parameters 
[[{t + l)n + m,{t + l)k + m]]q; therefore, the rates of these stabilizer block codes approach 

(t + l)k + m , k + m/(t+l) k 
lim ) = lim — — ') ' = -. (11-21) 

t-^cxi [t + l)n + m t^oo n + m/ (t + 1) n 

We say that an error E in Poo is detectable by a convolutional stabilizer code with stabilizer S if and only 
if a scalar multiple of E is contained in or if does not commute with some element in S. The weight wt 
of an element in Poo is defined as its number of non-identity tensor components. A quantum convolutional 
stabilizer code is said to have free distance d/ if and only if it can detect all errors of weight less than df, but 
cannot detect some error of weight df. Denote by Z{Poo) the center of Poo and by Cp^ (S) the centralizer of 
S in Poo. Then the free distance is given by df — min{wt(e) | e € Cp^{S) \ Z{Poo)S}. 

Let (/3, /3'^) denote a normal basis of Fq2 /¥q. Define amap r: Poo Tg2 by T{uj'^X{ao)Z{bo)(>i)X{ai)Z{bi)(^ 
■ ■ ■) = (/3ao + /3'^&0: P^^i + /3*^i7 • ■ ■ )• For sequences v and w in r^2, we define a trace-alternating form 

I - W/p [ ^2,_^2 ) ■ (11-22) 

Lemma 143. Let A and B be elements of Poo- Then A and B commute if and only if {t{A) \ T{B))a = 0. 
Proof. This follows from [ ] and the direct limit structure. □ 

Lemma 144. Let Q be an ¥g2-linear [(n, k,m)]q quantum convolutional code with stabilizer S, where S = 
\im{Si, iij) and Sq an abelian subgroup of Pq such that SI, S2, and S3 hold. Then C = <7~^t{S) is an 

¥q2-linear {n, {n — k)/2; ji < [m/n])^2 convolutional code generated by (j^^t{Sq). Further, C C C^''. 

Proof Recah that a : Fg2[£)]" r,2, maps u{D) in Vg2[D]"' to YT^Zq D^Ui{D'^). It is invertible, thus 
fT~-^r(e) = cr^^ oT(e) is well defined for any e in Poo- Since S is generated by shifted versions of Sq, it follows 
that C = a^^T{S) is generated as the ¥q2 span of cr~-^T(5o) and its shifts, i.e., D^a'^T{So), where I £ Af. 
Since Q is an Fg2-linear [{n, k, rn)]q quantum convolutional code, 5*0 defines an [[rt-|-m, fc-l-TO]]^ stabilizer code 
with (n— fc)/2 Fq2-linear generators. Since the maps a and r are linear cr~^r(S'o) is also Fq2-linear. As <7~^T{e) 
is in Fq2[il']" we can define an (n — /c)/2 x n polynomial generator matrix that generates C. This generator 
matrix need not be right invertible, but we know that there exists a right invertible polynomial generator 
matrix that generates this code. Thus C is an (n, {n — k)/2; n)q2 code. Since S is abelian, Lemma 143 and 
the Fq2-linearity of S imply that C C C-^'^ . Finally, observe that maximum degree of an element in (T~^r(S'o) 
is [m/n] owing to a. Together with [nS, Lemma 14.3.8] this implies that the memory of a~^T{S) must be 
jjL < \m/n] . □ 
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11.5 CSS Code Constructions 

We define the degree of an F^2-linear [{n,k,m)]q quantum convolutional code Q with stabilizer S as the 
degree of the classical convolutional code a~^T{S). It is possible to define the degree of the quantum 
convolutional code purely in terms of the stabilizer too, but such a definition is somewhat convoluted. We 
denote an [{n,k,m)]q quantum convolutional code with free distance df and total constraint length S as 
[(n, fc, to; (5, df)]q. It must be pointed out this notation is at variance with the classical codes in not just the 
order but the meaning of the parameters. 

Corollary 145. An ¥^2 -linear [(n, fc, to; 5, convolutional stabilizer code implies the existence of an 

(n, {n — fc)/2; 6)^2 convolutional code C such that df = wt(C"'"'' \ C). 

Proof. As before let C — a~^T{S), by Lemma 143 we can conclude that cr~^T{Cp^{S)) C C'^'^. Thus an 
undetectable error is mapped to an element in C'^'^ \ C. While t is injective on S it is not the case with 
Cp^{S). However we can see that if c is in C^'' \ C, then surjectivity of t (on Cp^{S)) implies that there 
exists an error e in Cp^{S) \ Z[Poo)S such that T(e) = c(c). As r and a arc isometric e is an undetectable 
error with wt(c). Hence, we can conclude that df = wt(C^'' \ C). Combining with Lemma 144 we have the 
claim stated. □ 

An [(n, fc, m; (5, code is said to be a pure code if there are no errors of weight less than df in the 
stabilizer of the code. Corollary 145 implies that df = wt(C^'' \ C) = wt(C^''). 

Theorem 146. Let C he {n, {n — k)/2, 5\ /i)g2 convolutional code such that C C C^'' . Then there exists an 
[(n, fc, n/i; (5, df)\q convolutional stabilizer code, where df = wt(C^'' \ C). The code is pure if df = wt(C^''). 

Sketch. Let G{D) be the polynomial generator matrix of C, with the semi-infinite generator matrix G defined 
as in equation (11.3). Let C* = {a{G{D)), . . . ,a{D'^G{D))) = (Ct_i, cr(i:)*G(i:»))), where cr is applied to every 
row in G{D). The self-orthogonality of C implies that Ct is also self-orthogonal. In particular Co defines 
an [n + nji, {n — k)/2\q2 self-orthogonal code. From the theory of stabilizer codes we know that there exists 
an abelian subgroup 5o < Po such that t(S'o) = Co, where Pt is the Pauli group over {t -\- l)n -I- to qudits; 
in this case to = n^i. This implies that r(/®"* ® So) = (j{D^G{D)). Define St = (S'f-i,/®"* ® So), then 
T{St) = {T{St-i,a{D*G{D))). Proceeding recursively, we see that T{St) = {a{G{D)), . . .,a{D*G{D))) = Ct. 
By Lemma 143, the self-orthogonality of Ct imphes that St is abelian, thus SI holds. Note that T{StZt/Zt) = 
Ct, where Zt is the center of Pt. Combining this with Fq2-linearity of Ct implies that StZt/Zt is a {t+l){n — k) 
dimensional vector space over Fq; hence S2 holds. For S3, assume that z ^ {1} is in St fl Zt. Then z can 
be expressed as a linear combination of the generators of St. But t(z) = implying that the generators of 
St are dependent. Thus St H Zt = {1} and S3 also holds. Thus S — lun{St, Hj) defines an [{n,k,n^;S)]q 
convolutional stabilizer code. By definition the degree of the quantum code is the degree of the underlying 
classical code. As a-^^T{S) = C, arguing as in Corollary 145 we can show that cr~^T{Cp^{S)) = C"'"'' and 
df ^wt{C^'^\C). " □ 

Corollary 147. LetC be an {n, {n—k)/2,6; ii)q code such that C C C^. Then there exists an [(n, k,n^; 5, df)]q 
code with df = wt(C^ \ C). It is pure ifwt{C^ \ C) = wt(C-^). 

Proof. Since C C C^, its generator matrix C as in equation (11.3) satisfies GG^ — 0. We can obtain an ¥q2- 
linear (n, (n - k)/2, 6; ^),2 code, C' from G as C = Tq2G. Since C, £ f^""''^/^''" we have CCt = CG^ = 0. 
Thus C C C'^". Further, it can checked that wt(C'^'^ \ C') = wt(C^ \ C). The claim follows from 
Theorem 146. □ 



11.6 QCC Singleton Bound 

Three main properties to measure performance of a quantum convolutional stabilizer code are code rate, 
minimum free distance, and complexity of its encoders (decoders). We study bounds on the minimum free 
distance of QCC's. All quantum block codes whether they are pure or impure saturate the quantum Singleton 
bound. Also, classical convolutional codes obey modified Singleton bound. We recall generalized Singleton 
bound for convolutional codes as shown in the following Lemma. 
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Lemma 148 (Generalized Singleton Bound). The free distance of a {n,k,m;6,df)q convolutional code is 
upper-bounded by 



df < (n — k) 



+ 1 +(5 + 1 = S(n,fc,m;,5). 



Proof. See Theorem 2.4]. 



(11.23) 



□ 



If the free distance of the QCC is same as the free distance of the dual code, i.e. C"'"\C, then QCC is 
called pure code. The following Lemma shows the generalized Singleton bound for pure QCC's. 

Theorem 149 (Singleton bound). The free distance of an [[n^k,m;5^df)\q ¥^2 -linear pure convolutional 
stabilizer code is bounded by 



df < 



26 

n + k 



1 



S+1 



(11.24) 



Proof. By Corollary 145, there exists an (n, {n — k)/2,d)q2 code C such that wt(C^'' \ C) — df, and the 
purity of the code implies that wt(C^'') = df. The dual code C-^ or C'^'^ has the same degree as code 
[91, Theorem 2.66]. Thus, C^'* is an (n, {n + k)/2,S)q2 convolutional code with free distance df. By the 
generalized Singleton bound [ , Theorem 2.4] for classical convolutional codes, we have 



< {n- {n + k)/2) 



{n + k)/2 



l]+5+l, 



which implies the claim. 



□ 



11.7 QCC Example 



Example 150 (QCC with rate 1/3 and single error correction). Consider the code C generated by 

gi = {D l + D + D^ 1 + D^). 

and the set of all generators can be given as {D^gi{D),i e Z}. So, the generator matrix of the code in the 
infinite form is 



( ffi(^) \ 
Dgi{x 



V • / 



^011 110 oil 

oil 110 oil 



(11.25) 



Now, we can map the generator G to a stabilizer subgroup S with two generators. The two generators of S 
have infinite length of Pauli matrices as 



and 



(. . . , ///, IXX, XXI, I XX, III, ...) 



, III, IZZ, ZZI, IZZ, III, ■■■). 



It is straight forward to check that gi is orthogonal to itself using the cross correlated function. Also, row 
shifts of the matrix G are orthogonal to each other. Therefore, the code C is self- orthogonal, and the dual 
code C-^ has rate 2/3 and generated by. 



H 



D 1 + D 1 + D 
1 1 1 



Also, C^ can be mapped to a ccntralizcr subgroup C{S) E Q . One can check that C^ has minimum free 
distance df — 3. Clearly, the convolutional code has memory v — 2, i.e. the max degree of gi. 



CHAPTER 12 



Quantum Convolutional Codes 
Derived from Reed-Solomon Codes 



In this chapter I construct quantum convolutional codes based on generalized Reed-Solomon and Reed-MuUer 
codes. The quantum convolutional codes derived from the generalized Reed-Solomon codes are shown to be 
optimal in the sense that they attain the Singleton bound with equality, as shown in Chapter 11. 



12.1 Convolutional GRS Stabilizer Codes 

In this section we will use Piret's construction of Reed-Solomon convolutional codes [146] to derive quantum 
convolutional codes. Let a £ Fg2 be a primitive nth root of unity, where n\q^ — \. Let w = {wq, . . . , 7 = 

(70, . . . , 7n-i) be in F^'a where 7^ and all 7i 7^ are distinct. Then the generalized Reed-Solomon (GRS) 
code over F^a is the code with the parity check matrix, (cf. [ , pages 175-178]) 



Wo 

Wo Jo 



Wi 

wi7i 



t-l 2(t-l) 

wolo "^171 



Wn-1 

w„_i7„_i 



(t-l)(n-l) 



(12.1) 



The code is denoted by GRS„_t(7,w), as its generator matrix is of the form i/-y.„ for some v E F^a- It is 
an [n,n — t,t + 1]^2 MDS code [n8. Theorem 5.3.1]. If we choose Wi ~ a^, then Wi ^ 0. If gcd(n, 2) = 1, then 

is also a primitive nth root of unity; thus 7; — o?"^ are all distinct and we have an [n, n — t, t + 1]^2 GRS 
code with parity check matrix _ffo, where 



Bo = 



a 

^,3 



a 
a' 



^2t-l ^2(21^1) 



a'- " 

T,3(n-1) 



J2t-l)(n-l) 



(12.2) 



Similarly li Wi = a ' and 7; = a , then we have another [n,n — t,t -\- 1]^2 GRS code with parity check 
matrix 
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H(D) 



D 
D 



a-^D 



(12.4) 



a 



a 
a~ 



v-(2t-l) ^-2(2t-l) 



-(n-1) 
'3(n-l) 



^-(2t-l)(«-l) 



(12.3) 



The [n, n — 2t, 2t + l]g2 GRS code with Wi = a and 7^ = a^* has a parity check matrix H* that 

is equivalent to [ 2° ] up to a permutation of rows. Let us consider the convolutional code generated by the 
generator polynomial matrix H{D) = Ho + DHi, see Equation 12.4. The polynomial generator matrix H{D) 
can also be converted to a semi-infinite matrix H that defines the same code. 

Our goal is to show that under certain restrictions on n the following semi-infinite coefficient matrix H 
determines an Fq2 -linear Hermitian self-orthogonal convolutional code 



H 



Ho Hi ••• 
Ho Hi 



(12.5) 



To show that H is Hermitian self-orthogonal, it is sufficient to show that Ho, Hi are both self-orthogonal 
and Ho and Hi are orthogonal to each other. A portion of this result is contained in [77, Lemma 8], viz., 
n ^ — 1. We will prove a slightly stronger result. We will show that the matrices Hq, Hi are self-orthogonal 
and mutually orthogonal, where 



Ho 



a 



1 af" 



a 



-1 q,2(m-1) 



a 



a 

2{n-l) 



a 



(p_i)(„_i) 



and 



(12.6) 



Hi 



a 



a 
a~ 



,(-«-!) 

-2(n-l) 



(12.7) 



1 a-^'^-i) a-2(A'-i) ••• a-(''-i)("-^) 

Lemma 151. Let njg^ — 1 such that q + l<n<q^ — 1 and 2 < /i = 2< < [n/ {q + 1)J , then 

Ho = {a'^ )l<l<^l.o< j<n and Hi = (a^*-' )i<i<^,o<j<n (12-8) 

are self-orthogonal with respect to the Hermitian inner product. Further, Ho is orthogonal to Hi. 

Proof. Denote by 7?oj = (1, • • ^a^("-i))_and i7i j = (1, a^^J , . . . ,a'^("-i)), where 1 < j < 

/i — 1. The Hermitian inner product of Ho,i and Ho,j is given by 



{Ho^i\Hoj)h 



E 



(yi+jq - 1 ■ 



(12.9) 
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which vanishes if i + jq ^ mod n. If 1 < i,j < — 1 = [n/((7 + 1)J — 1, then q + I < i + jq < 
{q + 1) [n/{q+ 1)J — {q + 1) < n; hence, (iJo,i|-H^o,i)/i ~ 0. Thus, Hq is self-orthogonaL Similarly, i/i is also 
self-orthogonal. Furthermore, 

— — ^ ■, ■ , a''"^'^)" - 1 

This inner product vanishes if a'"^' ^ 1 or, equivalently. Hi — jq^ mod n. Since 1 < «, j < + 1)J ~ 

1 < g — 2, we have 1 < i < [n/ (g + 1)J — 1 < g — 2 while q < jq < q [n/ (q + 1)\ — q < n. Thus i ^ jq mod n 
and this inner product also vanishes, which proves the claim. □ 

Since Hi is contained in Hi, we obtain the following: 

Corollary 152. Let 2 < fi — 2t < [n/ {q + 1)J , where n\q^ — 1 and q + l<n<q^ — l. Then H^ and Hi are 
Hermitian self-orthogonal. Further, Hq is orthogonal to Hi with respect to the Hermitian inner product. 

The following example explains our construction. 
Example 153. Let q ~ 5 and t — 2, then n — 24 and 2<^ = 4<q — 1. 

3 „,22 „,23 



Ho = 



and 



Hi = 



-66 



-23 
-69 



We notice that H^Hq — 0, HfHi — 0, and HqHi = 0. Also if we extend Hq by one row, we find that 



Before we can construct quantum convolutional codes, we need to compute the free distances of C and 
C-'-'', where C is the convolutional code generated by H. 

Lemma 154. Let 2 < 2t < [n/{q+ where gcd(7i, 2) = 1, — 1 and q + l<n<q'^ — 1. Then the 
convolutional code C — Tg2H has free distance df>n — 2t+l>2t+l = d^ , where d^ = wt(C^'*) is the 
free distance of C"'"'' . 

Proof. Since — wt(C-'-'') = wt(C-'-), we compute the weight wt(C^). Let c = (. . . , 0, cq, . . . , c/, 0, . . .) be 
a codeword in with Ci e F^2 , cq 7^ 0, and c; 7^ 0. It follows from the parity check equations cH^ = that 
cqHI = = ciH^ holds. Thus, wt(co),wt(Q) > t + I. If / > 0, then wt(c) > wt(co) + wt(Q) > 2i + 2. If 
I = 0, then Co is in the dual of H* , which is an [n, n — 2t, 2t + l]q2 code. Thus wt(c) = wt(co) > 2t + 1 and 
dj >2t+ 1. But if Cx is in the dual of H*, then (. . . , 0, Cx, 0, . . .) is a codeword of C. Thus dj = 2t + 1. 

Let (. . . , Ci-i, Ci, Ci+i, . . .) be a nonzero codeword in C. Observing the structure of C, we see that any 
nonzero Ci must be in the span of H*. But H* generates an [n, 2t, n—2t + l]q2 code. Hence df > n — 2t + 1- 
If 2t < ln/{q + 1)J , then t < n/6; thus df > n - 2t + 1 > 2t + I ^ dj holds. □ 

The preceding proof generalizes [14G, Corollary 4] where the free distance of C"*- was computed for q = 2™. 



12.2 Quantum Convolutional Codes from RS Codes 

We derive a family of quantum convolutional codes based on the previous construction of generalized Reed- 
Solomon Codes. Furthermore, we show the optimality of the derived quantum codes. 

Theorem 155. Let q be a power of a prime, n an odd divisor of q^ — 1, such that q + l<n<q'^ — 1 
and 2 < 11 = 2t < \n/(q+l)\. Then there exists a pure quantum convolutional code with parameters 
[{n,n — fi,n; fi/2, ^ + l)]q. This code is optimal, since it attains the Singleton bound with equality. 
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Proof. The convolutional code generated by the coefficient matrix H in equation (12.5) has parameters 
(n,/i/2,(5 < /i/2; l,df)q2. Inspecting the corresponding polynomial generator matrix shows that 5 < /i/2, 
since Vi — 1 for 1 < i < /i/2. By Corollary 152, this code is Hermitian self-orthogonal; moreover, Lemma 154 
shows that the distance of its dual code is given hy d-j = < dj. By Theorem 146, we can conclude that 

there exists a pure convolutional stabilizer code with parameters [(n,n — ^,n;S < ^/2,fi+ l)]q. It follows 
from Theorem 149 that 



fi+l< (m/2) {[2S/{2n ^ fi)\+l) + S+l 



(12.11) 



Since [/i/(2n — /i)J = 0, the right hand side equals /i/2 + 6 + 1, which implies d ~ /i/2 and the optimality of 
the quantum code. □ 

The following two examples explain our construction. 

Example 156. Let q = A and t = 1, then n = 15 and 2</i = 2<q — 1. 

Ho=[ 1 a ■■■ a^^ a" ] (12.12) 

and 



Hi=[l 



„-3 



(12.13) 



We notice that HqHq 
H^Ho ^ 0. 



0, HfHi = 0, and HqHi — 0. Also if we extend Hq by one row, we find that 



Example 157. Let q ~ 5 and t — 2, then n — 2A and 2</i = 4<g— 1. 

4 

I IV IV IV 1^' 



Hi 



a 



a 



-12 



-66 



-23 
-69 



We notice that HqHq = 0, HfHi = 0, and HqHi = 0. Also if we extend Hq by one row, we find that 
H^Ho + 0. 



12.3 Convolutional Codes from Quasi-Cyclic Subcodes of Reed- 
Muller Codes 

An alternative method to construct convolutional codes from block codes is to use quasi-cyclic codes. We 
consider the Reed-MuUer codes to construct a series quantum convolutional codes with varying memory. But 
first we review the necessary background on binary Reed-MuUer codes. Furthermore, we use the framework 
developed by Esmaeili and Gulliver to construct quasi-cyclic subcodes RM codes from block RM codes over 
the binary field, see [51], [50] for more details. 

Let u, u e F2 , where u — (wi, W2, . . . , Un) and v = (ui, 1*2, . . . , Wn). We define the boolean product 

UV = {uxVx,U2V2, ■ ■ ■ ,UnVn)- (12.14) 

The product of i such n-tuples is said to have a degree of i. Let vq = (1,1,...,1) S F^"'. For m > and 
1 < i < m, define hi S F| as concatenation of 2*""* blocks of the form 01. Each block is of length 2' and 
equal to (01), where 0, 1 e Fj' \ 

Let < r < m and _B = 62, . . . , 6m} C F| . Then the rth order Reed-MuUer code is the span of vq 
and all products of elements in B upto and including the degree r and it is denoted by TZ{r,m). Let 
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denote the generator matrix of Tl{r,m). Let denote all the products with exactly degree i. Then for 
< i < r < m (see [ ] for details) 



Gr 
^ — 



Dr — 1 

rn 
Qi 



(12.15) 



The dimension of TZ{r,m) is given by k{r) — J2l=o (T) distance is given by 2'""'". The dual of 

TZ{r,m) is given by TZ{r,m)^ — TZ{m — 1 — r, m). The dual distance of TZ{r,m) is 2''+^ as can be easily 
verified. Further details on the properties of Reed-Muller codes can be found in [88]. 

Let Wf_i — (110 • • - 0) e Fj^. Let Iw^ denote the vector obtained by concatenating I copies of w^i. For 



< i < 



1, let QM, 



has the following generator matrix. 



-- (2'-*-1m;,+i) ® B''-^^ which is a matrix of size x 2" and for i = / let 

1 . The convolutional code derived from the quasi-cyclic subcode of 7?.(r, m) 



G 



r)r-/+l 

/^r — l 
'^m.-l 

[ Go Gi 



^m-l 






or 

^m-l 




h 


















































(12.16) 



We note that Go = and for 1 < i < 2 — 1, the elements of Gi are a subset of the elements in Gq. 

The convolutional code gener ated by G has rate J2l=o (""0 Z^""' and free distance 2"-'' [ ]. 
Lemma 158. The free distance of the convolutional code orthogonal to G is 2^^^. 

Proof. Assume that c is codeword in the space orthogonal to G. Without loss of generality we can take it to 
be of the form c = (cq, ci, . . . , Ci, . . .), where all the a = 0, for i < 0. Since cG^ = 0, we have the following 
set of constraints for t > 0. 



Alternatively, we can write the above as a set of equations as 



coGj 



(12.17) 



ciG'o +coGi = 



0, 
0, 



-iGf 



; = (12.18) 

□ 

If follows that Co e TZ{r,m — l)^ . Since the rowspace of Gi is a subset of the rowspace of Go, it then 
follows that cqGJ — giving ciGj^" — 0. Thus ci is also in TZ{r,ni — l)^. Proceeding like this we see that 
Ci G TZ{r,m — l)^ for all z > 0. Thus the free distance of the code orthogonal to G is equal to the dual 
distance of TZ{r, m — I) which is 2*"+^. 
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Lemma 159. Let 1 < I < m and < r < [(to — I — 1)/2J, then the convolutional code generated by G is 
self-orthogonal. 

Proof. It is sufRcient to show that GiGj = for < i,j < 2' — 1. Since the rows of Gi are a subset of 
the rows of Gq it suffices to show that Gq is self-orthogonal. For Gq to be self-orthogonal we require that 
r < (to — Z) — r — 1 which holds. Hence, G generates a self-orthogonal convolutional code. □ 

12.4 Quantum Convolutional Codes from QC RM Codes 

We can derive a family of QC RM codes as shown in the following Lemma. 

Lemma 160. Let 1 < I < m andO <r< [(to — / — 1)/2J, then there exist pure linear quantum convolutional 
codes with the parameters ((2™"', 2™^' — 2fc,2' — 1)) and free distance 2^^^, where k = X]I=o ('"j^O- 

Proof. Since G defines a linear self-orthogonal convolutional code with parameters (2™"', /c(r), 2' — 1) and 
free distance 2™"*", there exists a linear quantum convolutional code with the parameters ((2™~'j2™^' — 
2fc(r),2' - 1)). For < r < [(to - / - 1)/2J, the dual distance 2''+i < 2™"'', hence the code is pure. □ 

It turns out that the convolutional codes in [ ] that are used here have degree 0, hence, are a sequence of 
juxtaposed block codes disguised as convolutional codes. Consequently, the codes constructed in the previous 
theorem have parameters [(2""', 2™"' - 2k{r),0; 0, 2''+i)]2. 

12.5 Conclusion and Discussion 

We constructed two families of quantum convolutional codes based on RS and Reed-Muller codes. We showed 
that quantum convolutional codes derived from our constructions have better parameters in comparison to 
quantum block codes counterparts. We proved that the codes derived from RS codes are optimal in a sense 
that they it attains generalized Singleton bound with equality. One possible extension of this work is to 
construct other good families of quantum convolutional codes. 



CHAPTER 13 



Quantum Convolutional Codes 
derived from BCH Codes 



Quantum convolutional codes can be used to protect a sequence of qubits of arbitrary length against de- 
coherence. We introduce two new families of quantum convolutional codes. Our construction is based on 
an algebraic method which allows to construct classical convolutional codes from block codes, in particular 
BCH codes. These codes have the property that they contain their Euclidean, respectively Hermitian, dual 
codes. Hence, they can be used to define quantum convolutional codes by the stabilizer code construction. 
We compute BCH-like bounds on the free distances which can be controlled as in the case of block codes, 
and establish that the codes have non-catastrophic encoders. Some materials presented in this chapter are 
also published in [9, 13] as a joint work with M. Grassl, A. Klappenecker, M. Rotteler, and P.K. Sarvepalli. 

13.1 Introduction 

Unit memory convolutional codes are an important class of codes that appeared in a paper by Lee [121]. 
He also showed that these codes have large free distance df among other codes (multi- memory) with the 
same rate. Convolutional codes are often designed heuristically. However, classes of unit memory codes 
were constructed algebraically by Piret based on Reed-Solomon codes [ ] and by Hole based on BCH 
codes [ : ]. In a recent paper, doubly-cyclic convolutional codes are investigated which include codes derived 
from Reed-Solomon and BCH codes [ , ;]. These codes are related, but not identical to the codes defined in 
this chapter. 

A quantum convolutional codes encodes a sequence of quantum digits at a time. A stabilizer framework 
for quantum convolutional codes based on direct limits was developed in [15] including necessary and sufficient 
conditions for the existence of convolutional stabilizer codes. An [(n, fc, m; i/)]q convolutional stabilizer code 
with free distance df = wt(C^\C) can also correct up to [■^--%— errors. It is important to mention that 
the parameters of a quantum convolutional code Q are defined differently. The memory m is defined as the 
overlap length among any two infinite sequences of the code Q. Also, the degree v is given by the degree of 
the classical convolutional code . The code Q is pure if there are no errors less than d/ in the stabilizer 
of the code; df = wt(C^\C) = wt(C^). 

Recall that one can construct convolutional stabilizer codes from self-orthogonal (or dual-containing) 
classical convolutional codes over Fg (cf. [15, Corollary 6]) and Fg2 (see [15, Theorem 5]) as stated in the 
following theorem. 

Theorem 161. An [{n, fc, nm; v, c?/)]g convolutional stabilizer code exists if and only ij there exists an (n, {n — 
k)/2,m;iy)q convolutional code such that C < where the dimension of is given by {n + k)/2 and 
df=wt{C^\C). 
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The main resuhs of this chapter are: (a) a method to construct convolutional codes from block codes 
(b) a new class of convolutional stabilizer codes based on BCH codes. These codes have non-catastrophic 
dual encoders making it possible to derive non-catastrophic encoders for the quantum convolutional codes. 



13.2 Construction of Convolutional Codes from Block Codes 

In this section, we give a method to construct convolutional codes from block codes. This generalizes an 
earlier construction by Piret [147] to construct convolutional codes from block codes. One benefit of this 
method is that we can easily bound the free distance using the techniques for block codes. Another benefit 
is that we can give easily a non-catastrophic encoder. 

Given an [n, k, d]q block code with parity check matrix i/, it is possible to split the matrix H into m + 1 
disjoint submatrices Hi, each of length n such that 



H 



Ho 
Hi 

Hm. 



(13.1) 



Then we can form the polynomial matrix 

H{D) = Ho + HiD + H2D^ 



HmD"^, 



(13.2) 



where the number of rows of H{D) equals the maximal number k of rows among the matrices H^. The matrices 
Hi are obtained from the matrices Hi by adding zero-rows such that the matrix Hi has k, rows in total. Then 
H{D) generates a convolutional code. Of course, we already knew that Hi define block codes of length n, 
but taking the Hi from a single block code will allow us to characterize the parameters of the convolutional 
code and its dual using the techniques of block codes. Our first result concerns a non-catastrophic encoder 
for the code generated by H{D). 



Theorem 162. Let C C F" &e an [n, k, d\q linear code with parity check matrix H in ¥q 



(n — k) X n 



Ai 



that 



H is partitioned into submatrices Hq,Hi, . . . 
for 1 < i < m. Define the polynomial matrix 



Hm as in equation (13.1) such that n = rki/p and rk Hi < k 



H{D) = Ho + HiD + H2D^ 



Hr^D'' 



(13.3) 



where Hi are obtained from the matrices Hi by adding zero-rows such that the matrix Hi has a total of k 
rows. Then we have: 

(a) The matrix H{D) is a reduced basic generator matrix. 

(b) If the code C contains its Euclidean dual or its Hermitian dual C^*^ , then the convolutional code 
U ~ {v{D)H[D) I v{D) G F^~'^[£)]} is respectively contained in its dual code or U^'^ . 

(c) Let df and djr respectively denote the free distances ofU and U^. Let di be the minimum distance of the 
code Ci = {v E I vHf = 0}, and let d^ denote the minimum distance of . Then the free distances 
are bounded by min{do + c?m, d} < d^ < d and df > d^ . 

Proof. To prove the claim (a), it suffices to show that 
i) H{fS) has full rank k; 

n) (coeff(i?(L')y,C*))i<i<„,i<j<„ has full rank k; 
iii) H{D) is non-catastrophic; 
cf. [140, Theorem 2.16 andJTheorem 2.24]. 

By definition, H{0) = Hq has rank k, so i) is satisfied. Condition ii) is satisfied, since the rows of H are 
linearly independent; thus, the rows of the highest degree coefficient matrix are independent as well. 

It remains to prove iii). Seeking a contradiction, we assume that the generator matrix H{D) is catas- 
trophic. Then there exists an input sequence u with infinite Hamming weight that is mapped to an output 
sequence v with finite Hamming weight, i. e. Vi — Q for all i > ip. We have 



Ho 



-iHi 



+ UiH„ 



(13.4) 



13.3. Convolutional BCH Codes 
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where Vi+m G and Uj G F^. By construction, the vector spaces generated by the rows of the matrices Hi 

intersect trivially. Hence Vi = ioi i > io implies that Ui-jHj = for j = 0, . . . , m. The matrix has full 
rank. This implies that Ui = Q for i > iq, contradicting the fact that u has infinite Hamming weight; thus, 
the claim (a) holds. 

To prove the claim (b), let v(_D), w{D) be any two codewords in U. Then from equation (13.4), we see 
that Vi and wj are in the rowspan of H i.e. C'^, for any i,j G Z. Since C"*" C C, it follows that Vi ■ Wj = 0, 
for any i,jGZ which implies that (v(D) | w(_D)) — J^iei, — 0- Hence U C JJ^ . Similarly, we can show 

that if C^'- C C, that U C [/^^ 

For the claim (c), without loss of generality assume that the codeword c{D) — X]i=o Ci^?* is in U^, with 
Co ^ ^ ci. Then c(_D)Z?™ and c{D)D~^ are orthogonal to every element in H{D), from which we can 
conclude that cqH!^ = = ciHq. It follows that cq E Cq and q G C;. If Z > 0, then wt(co) > fi,„ and 
wt(cj) > do implying wt(c(_D)) > do + dm. If ^ = 0, then cqD'^ , where < z < m is orthogonal to every 
element in H{D), thus cqHI = 0, whence coi?* = and cq S C, implying that wt(co) > d. It follows that 
wt(c) > minjdo + d„i, d}, giving the lower bound on djr. 

For the upper bound note that if cq is a codeword C, then cqHI = 0. Therefore codeword c{D) and its 
shifts c{D)D^ for < i < m are orthogonal to H{D). Hence c{D) e and < d. 

Finally, let c{D) be a codeword in U . We saw earlier in the proof of (b) that that every Ci is in . Thus 
df > min{wt(cj)} > d^ . □ 

A special case of our claim (a) has been established by a different method in [ , Proposition 1]. 



13.3 Convolutional BCH Codes 

One of the attractive features of BCH codes is that they allow us to design a code with desired distance. 
There have been prior approaches to construct convolutional BCH codes most notably [157] and [8()], where 
one can control the free distance of the convolutional code. Here we focus on codes with unit memory. In the 
literature on convolutional codes there is a subtle distinction between unit memory and partial unit memory 
codes, however for our purposes, we will disregard such nuances. Our codes have better distance parameters 
as compared to Hole's construction and are easier to construct compared to [157]. 



13.3.1 Unit Memory Convolutional BCH Codes 

Let ¥q be a finite field with q elements, n be a positive integer such that gcd(n, q) = 1. Let a be a primitive 
nth root of unity. A BCH code C of designed distance S and length n is a cyclic code with generator 
polynomial g{x) in Fg[a;]/(a:" — 1) whose defining set is given by Z = Cf, U Cb+i U • • • U Cb+s-2, where 
Cx = {xq^ mod n I i e Z, i > 0}. Let 



a 



1 a(''+^-2) a^ib+s-2) 



aHn-i) 

,(6+l)(«-l) 



Jb+S-2){n-l) 



Then C = {v G \ vHg ^ = 0}. If r = oidn{q), then a parity check matrix, H for C is given by writing 
every entry in the matrix Hg b as a column vector over some Fg-basis of Fgr, and removing any dependent 
rows. Let B = {bi, . . . , br} denote a basis of Fgr over Wq. Suppose that w = (wi, . . . , w„) is a vector in F^r, 
then we can write Wj = Wj.ibi + • • • + Wj^rbr for 1 < j < n. Let = . . . , w„^i) be vectors in F^ with 

1 < i < r, For a vector v in Fg , we have v ■ w = if and only if v ■ = for all 1 < i < r. 

For a matrix M over Fgr, let exsiM) denote the matrix that is obtained by expanding each row into r 
rows over Fg with respect to the basis B, and deleting all but the first rows that generate the rowspan of the 
expanded matrix. Then H — eicsiHs^b)- 

It is well known that the minimum distance of a BCH code is greater than or equal to its designed distance 
(5, which is very useful in constructing codes. Before we can construct convolutional BCH codes we need the 
following result on the distance of cyclic codes. 
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Lemma 163. Let gcA{n, q) — \ and 2 < a < P < n. Let C C be a cyclic code with defining set 

Z = {z\ z ea^,a <x < /3,x^0modq}. (13.5) 
Then the minimum distance A(a,/3) of C is lower bounded as 

A(a,/.)>|^;L(/3-o + 3)/,J-2, ./^-.>2,-3; ^^3^^^ 
I [(/? — a + 3)/2J , otherwise. 

Proof. Our goal is to bound the distance of C using the Hartmann-Tzeng bound (for instance, see [nn]). Let 
A = {z,z+l,...,z + a-2} C Z. Let gcd(&, q) < a and A + jb = {z + jb, z + 1 + jb, . . . , z + a - 2 + jb} C Z 
for all < j < s. Then by [S(S, Theorem 4.5.6], the minimum distance of C is A{a, P) > a + s. 

We choose b = q, so that gcd(n, g) = 1 < a is satisfied for any a > 1. Next we choose A C Z such 
that 1^1 = q — 1 and A + jb C Z for < j < s, with s as large as possible. Now two cases can arise. If 
f3 ~ a + 1 < 2q ~ 2, then there may not always exist a set A such that \A\ — q — 1. In this case we relax 
the constraint that 1^41 = g — 1 and choose A as the set of maximum number of consecutive elements. Then 
|A| = a-1 > [(/? - a + 1)/2J and s > giving the distance A(a,/3) > [(/3 - a + 1)/2J + 1 = [/3 - a + 3)/2j. 

If (/3 — a + 1) > 2(7 — 2, then we can always choose a set AC{z\a<z<a + 2q — 3,z^0 mod q} 
such that \A\ = q — 1. Since we want to make s as large as possible, the worst case arises when A = 
{a + g - 1, . . . , a + 2g - 3}. Since A + jb C Z holds for < j < s, it follows a + 2q - 3 + sq < f3. Thus 
s < [(/3 - a + 3)/gJ - 2. Thus the distance A(a, /3) > g + [(a - /3 + 3)/gJ - 2. □ 

Theorem 164 (Convolutional BCH codes). Let n be a positive integer such that gcd(7i, q) = 1, r — ord„(g) 
and 2 <2S < S^ax, where 



q--l 



(qr'-/2l -l-(g-2)[r odd]) 



(13.7) 



Then there exists a unit memory rate k/n convolutional BCH code with free distance df > (5+l + A((5 + l, 26) 
and k — n — K, where k = r \6{l — l/f?)] . The free distance of the dual is > (5max + 1- 

Proof. Let C C be a narrow-sense BCH code of designed distance 26+1 and B a basis of F^r over F^. 
Recall that a parity check matrix for C is given hy H — exB(i?2i5+i,i)- Further, let Hq = cxB(i75_|_i_i), then 
from 



(13.8) 



it follows that H = 



, where Hi is the complement of Hq in H. It is obtained from exB{Hs+ij+i) 



Ho 
Hi 

by removing all rows common to eiiB{Hs+i,i). The code Dq with parity check matrix Hq = cxb{Hs+i.i) 
coincides with narrow-sense BCH code of length n and design distance 6+1. 

By [13, Theorem 10], we have dimC — n — r \26{1 — l/q)~\ and dimDo = n — r \6{1 — l/<z)]; hence 
rki? = r [25(1- 1/g)], rkiJo = r \6{1 - 1/g)], and rki?i = rki/-rki/o = r \26[1 - l/q)] - r\6{l - l/q)]. 
For X > 0, we have [x] > [2a;] — [x] ; therefore, k := rk7?o > rkiJi. 

By Theorem 162(a), the matrix H defines a reduced basic generator matrix 

H{D) = Ha + DHi (13.9) 

of a convolutional code of dimension k, while its dual which we refer to as a convolutional BCH code is of 
dimension n — k. 

Now Hi is the parity check matrix of a cyclic code, Di of the form given in Lemma 163, i.e. the defining 
set of Di is Zi as defined in (13.5) with a — 6 + 1 and (3 = 26. Since Hi is linearly independent of Hq we 
have X ^ mod q in the definition of Zi . 

By Theorem 162(c), the free distance of the convolutional BCH code is bounded as minjdo + c'i, d} < df < 
d. By Lemma 163, di > A{6+1,26) and by the BCH bound do > 6+1. Thus df > 6 + 1 + A{6 + 1,26). The 
dual free distance also follows from Theorem 162(c) as djr > d-^. But d-^ > (5max + 1 by [13, Lemma 12]. □ 



13.4. Constructing Quantum Convolutional Codes from Convolutional BCH Codes 
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13.3.2 Hole's Convolutional BCH Codes 

In the previous construction of convolutional BCH codes we started with a BCH code with parity check 
matrix H = _ff25+i,i, see equation (13.8), and obtained _ffo to be the expansion of Hs+i^i- An alternate 
splitting of H gives us the Hole's convolutional BCH codes [ ]. Because of space constraints we will not 
explore the details or other choices of splitting the parity check matrix of the parent BCH code. 

We notice that if the matrix H satisfies the conditions in Theorem 162, then the convolutional code has 
non-catastrophic encoder. Furthermore the minimum free distance of this code is given hy df > d-Ho + dn^ 
if dHoHi > + dui, where dna, rfifi, and dugHi are the minimum distances of the block codes [n,n — ji], 
[n^n ~ jjL + A], and [n,rt — 2/i + A] respectively, see [Nli, Proposition 2] for more details. Also, df = dnoHi 
if duaHi < duo + dux- We have showed in [1(1] that there exist a [n, n — r\{5 — 1)(1 — l/<z)l] nonbinary 
dual-containing BCH code with designed distance 5 = 2t + \ and length n g'' — 1 for 2 < (5 < Jmax = 
(gk/zl - 1 - (g - 2)[r odd]) and r = ord„(g). 

Let us construct the matrices Ha and Hi as follows. Let a be a primitive element in F^r. Let 2 < t < 

Ho 
Hi 



q\r/^] ^ + 1 and r > 3. Assume the matrix H 



has size t{l ~ 1/q) x n. We can extend every 



row of H into r-tuples of powers of a. Now, the matrix Hq has size {\t{l — l/q)~\ — l)r x n taking the first 
([^(1- 1/q)] - l)r rows of 7J. 



Hn 



1 a 
1 



a 



(a3)("-i) 



(13.10) 



1 a2(*-4) ... a(*-4)(„-i) 

The matrix Hi has size {\t{l — l/g)] — l)r x n where all elements are zero except at the last row of H. 



Hi = 








1 ^2(5-2) ... ^(5-2)(„-l) 



(13.11) 



Theorem 165. Let H be a parity check matrix defined by Hq + DHi. If H is canonical, then there exists 
an {n,k,m]df) convolutional code with n — q^ — 1, k ^ n — r\t{l — l/q)~\ — r, m = r, and df > 5 for 
2<5 = 2t+l< 5,nax = (g^'/'l - l-{q-2)[r odd]). 

Proof. We first show that the parity check matrix H = Hq -|- DHi is canonical. We notice that a) Hq has 
full rank ([t(l — I/?)] — l)f rows; since it generates a BCH code with parameters [n,n— {\t{\ — l/g)] — l)r]. 
b) the last r rows of Hi are linearly independent, c) the rows of the matrix Hq are different and linearly 
independent of the last r rows of Hi. Therefore from [ , Proposition 1], The parity check matrix H is 
canonical and it generates a convolutional code C with parameters {n,n ~ {\t{l — !/(?)] — \)r,r). Second, 
we compute the free distance of C . Notice that the matrix Hq defines a BCH code with minimum distance 
dHo ^ 2t~~ \ = 6 — 2 from the BCH bound. Also, the matrix Hi defines a BCH code with minimum distance 

Hq 



at least 2 if two columns are equal. Therefore, the BCH code generated by H = 



Hi 



with parameters 



[n,n — \t(l — l/q)]r] has minimum distance > 5 
code C has free distance df > S. 



2t + 1. From [Si-, Proposition 2], the convolutional 

□ 



13.4 Constructing Quantum Convolutional Codes from Convolu- 
tional BCH Codes 

In this section we derive one family of quantum convolutional codes derived from BCH codes. We briefiy 
describe the stabilizer framework for quantum convolutional codes, see also [15, 81, 139]. The stabilizer is 
given by a matrix 

S{D) = {X{D)\Z{D)) e FJD] (13.12) 
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which satisfies the symplectic orthogonality condition = X{D)Z{1/DY — Z{D)X{1/ DY . Let C be a 
quantum convolutional code defined by a stabilizer matrix as in eq. (13.12). Then n is called the frame size, 
k the number of logical qudits per frame, and k/n the rate of C. It can be used to encode a sequence of 
blocks with k qudits in each block (that is, each element in the sequence consists of k quantum systems each 
of which is q-dimensional) into a sequence of blocks with n qudits. 
The memory of the quantum convolutional code is defined as 

m= max (max(degXij(_D),degZy(£'))). (13.13) 

l<i<n — fc,l<j<n 

We use the notation [(n, fc,m)]g to denote a quantum convolutional code with the above parameters. We 
can identify S{D) with the generator matrix of a self-orthogonal classical convolutional code over or Fq2, 
which gives us a means to construct convolutional stabilizer codes. Analogous to the classical codes we can 
define the free distance, dj and the degree v, prompting an extended notation [(n, fc, m; i^, c?/)]g. All the 
parameters of the quantum convolutional code can be related to the associated classical code as the following 
propositions will show. For proof and further details see {^'^^Y- 

Proposition 166. Let (n, {n~ fc)/2, v; m)q be a convolutional code such that C < C^, where the dimension of 
C"*" is given by (n + fc)/2. Then an [{n, k, m; f, df)]q convolutional stabilizer code exists whose free distance 
is given by df = wt(C^\C), which is said to be pure if df = wt(C-'-). 

Proposition 167. Let C be an {n, (n — fc)/2, i/; m)q2 convolutional code such that C C C^''. Then there exists 
an [{n, k, m; v, df)]q convolutional stabilizer code, where df — wt(C^'' \ C). 

Under some restrictions on the designed free distance, we can use convolutional codes derived in the 
previous section to construct quantum convolutional codes. These codes are slightly better than the quantum 
block codes of equivalent error correcting capability in the sense that their rates are slightly higher. 

Theorem 168. Assume the same notation as in Theorem 164- Then there exists a quantum convolutional 
code with parameters [(n, n — 2k, n)]q, where k — r \6{1 — 1/q)] . Its free distance df > S + 1 + A{S + 1, 26), 
and it is pure to d' > Jmax + 1 • 

Proof. We construct a unit memory (n, n — K)q classical convolutional BCH code as per Theorem 164. Its 
polynomial parity check matrix H{D) is as given in equation (13.9). Using the same notation in the proof, 
we see that the code contains its dual if H is self-orthogonal. But given the restrictions on the designed 
distance, we know from [13, Theorem 3] that the BCH block code defined by H contains its dual. It follows 
from Theorem 162(b) that the convolutional BCH code contains its dual. From [IT), Corollary 6], we can 
conclude that there exists a convolutional code with the parameters [(n, n — 2k, n)]q. By Theorem 164 the 
free distance of the dual is d' > (^max + 1, from whence follows the purity. □ 

Another popular method to construct quantum codes makes use of codes over ¥q2 . 

Lemma 169. Let 2 < 26 < [^(q'' — l)/((7^'' — 1)J , where and r = ord„(g^). Then there exist quantum 
convolutional codes with parameters [{n,n — 2K,n)]q and free distance df > 6 + I + A{5 + 1,26), where 
K = r \6il - l/g2)] . 

Proof. By Theorem 164 there exists an (n, n ~ k, 1)^2 convolutional BCH code with the polynomial parity 
check matrix as in equation (13.9). The parent BCH code has design distance 26+1 and given the range of 
6, we know by [ ' Theorem 14] that it contains its Hermitian dual. By Theorem 162(b), the convolutional 
code also contains its Hermitian dual. By [ I "i. Theorem 5], we can conclude that there exists a convolutional 
stabilizer code with parameters [(n, n — 2k, n)]q. □ 

In [15], we have shown generalized Singleton bound for convolutional stabilizer codes. The free distance 
of an [(n, k, m; v, c?/)]g Fq2-linear pure convolutional stabilizer code is bounded by 



< 



2v 



v + 1. (13.14) 



The bound can be reformulated in terms of the memory m instead of the total constraint length v. Observe 
that if m = 0, then it reduces to the quantum Singleton bound viz. df < [n — k)/2 + 1. 



small difference exists between the notion of memory defined here and the one used in [15] 



13.6. Efficient Encoding and Decoding Circuits of QCC-BCH 
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Corollary 170. A pure {{n,k,m,df))q linear quantum convolutional code obeys 



df < 



.-k 



m[n — k) 
n + k 



+ {n-k){m + l)/2 + l. 



Proof. The proof is actually straightforward. It follows from [ . ,, Theorem 7] and the fact that 6 < m{n — 
k)/2 □ 



13.5 QCC from Product Codes 

Let (n, fc, m) be a classical convolutional code that encodes k information into n bits with memory order m. 
We construct quantum convolutional codes based on product codes as shown in [80] . We explicitly determine 
parameters of the constructed codes with the help of results from [13]. We follow the natation that has been 
used in [81]. 

Lemma 171. Let Ci — (7ii,fci,mi) be a classical linear convolutional code over ¥q . Also, let C2 = 
(n2,fc2,TO2) be an Euclidean self-orthogonal linear code overFg . Then the product code Ci ® C2 = (nin2 — 
m, 711712 — kik2,m) defines a quantum convolutional code with memory mi *m2- 

Proof See [so, Theorem 10]. □ 

Now, we can restrict ourselves to one class of codes. Consider the convolutional BCH codes derived in 
this chapter [9]. We know that the code is dual-containing if i5 < 5max- In our construction, we do not 
require both Ci and C2 to be convolutional codes or even self-orthogonal. We choose Ci to be an arbitrary 
convolutional code and C2 can be self-orthogonal block or convolutional code as shown in Theorem 171. 
Therefore, it is straightforward to derive quantum convolutional BCH codes from BCH product codes as 
shown in Theorem 172. The reason we use this construction rather than the convolutional unit memory code 
construction is because the quantum codes derived from product codes have efficient encoding circuits as 
shown in [81]. 

Theorem 172. Let n be a positive integer such that gcd(7i,(j) — 1. Let Ci be a convolutional BCH code 
with length n, designed distance 5i and memory m. Let C2 be a BCH code with designed distance 2 < 62 ^ 
q\'^/^~\ _ 1 _ (g_ 2)[r odd], then there exists a quantum convolutional BCH code constructed from the product 
code Ci ® C2 and with the same parameters as Ci . 

Proof. We know that the code C2 is self-orthogonal since 2 < 62 < gr'"/^! — 1 — (g — 2)[r odd]. From [ ], the 
convolutional product code Ci ® C2 is self-orthogonal and it has memory m. From [ , Proposition 1.], there 
exists a quantum convolutional BCH code with the given parameters. □ 



13.6 Efficient Encoding and Decoding Circuits of QCC-BCH 

Quantum convolutional codes promise to make quantum information more reliable because they have online 
encoding and decoding circuits. What we mean by online encoder and decoder is that the encoded and 
decoded qudits can be sent or received with a constant delay. The phase estimation algorithm can be used 
to measure the received quantum information. In this section, we design efficient encoding and decoding 
circuits for unit memory quantum convolutional codes derived in this chapter [9, ir>]. We use the framework 
established in [82, 81]. 

Grassl and Rotteler showed that an encoder circuit £ for a quantum convolutional code C exists if the 
gates in £ can be arranged into a circuit of finite depth. This can be applied to quantum convolutional codes 
derived from CSS-type classical codes, as well as product codes as shown in [ , Theorem 5]. 

Let us assume we have two classical codes Ci and C2 with parameters {n, ki) and (n, k2) and represented 
by a parity check matrices Hi and H2 , respectively. Let us construct the matrix 



H2{D) 






Hi{D) 



C¥q[D] 



(2n — fci — ^2) x2n 



where Hi{D) is the polynomial matrix of the matrix Hi. 
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We can assume that the matrix H = Hi + H2D defines a convolutional BCH code. The matrices Hi{D) 
and H2{D) correspond to non-catastrophic and delay-free encoders. They also have full-rank fci and ^2 [9]- 
The following theorem shows that there exists an encoding circuit for quantum convolutional codes derived 
from convolutional BCH codes. 

Theorem 173. Let Q be a quantum convolutional code derived from convolutional BCH code as shown in 
Theorem 164- Then Q has an encoding circuit whose depth is finite. 

Proof. We know that there is a convolutional BCH code with a generator matrix H = Hi + H2D. Further- 
more, the matrices Hi and H2 define two BCH codes with parameters (n, fci) and (n, fc2). Let us construct 
the stabilizer matrix 



{X{D)\Z{D) 



( "i^^ I HiiD) ) ^ FJi?](2"-'=-'=^)x2". (13.15) 



The matrices Hi{D) and H2{D) correspond to two encoders satisfying i) they correspond to non- 
catastrophic encoders as shown in [0, Theorem 3.]. ii) they have full-ranks n — ki and n — /c2. iii) they 
have delay-free encoders. Therefore, they have a Smith normal form given by 



Ai{D)H2{D)Bi{D)=[l O^j, (13.16) 
for some chosen matrices of Ai{D) e Fji:)]^"^'''^)^'"-'^^) and Bi{D) e FJZ)]"^". 

□ 



13.7 Conclusion and Discussion 

In this chapter, we presented a general method to derive unit memory convolutional codes, and applied it 
to construct convolutional BCH codes. In addition, we derived two families of quantum convolutional codes 
based on BCH codes. By this construction, other families of convolutional cyclic codes can be derived and 
convolutional stabilizer codes can be also constructed. 



Part IV 

Quantum and Classical LDPC Codes 
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CHAPTER 14 



A Class of Quantum LDPC Codes 
Constructed Prom Finite Geometries 



Low-density parity check (LDPC) codes are a significant class of classical codes with many applications. 
Several good LDPC codes have been constructed using random, algebraic, and finite geometries approaches, 
with containing cycles of length at least six in their Tanner graphs. However, it is impossible to design a 
self-orthogonal parity check matrix of an LDPC code without introducing cycles of length four. 

In this chapter, a new class of quantum LDPC codes based on lines and points of finite geometries is 
constructed. The parity check matrices of these codes are adapted to be self-orthogonal with containing 
only one cycle of length four in each pair of two rows. Also, the column and row weights, and bounds on 
the minimum distance of these codes are given. As a consequence, these codes can be encoded using shift- 
register encoding algorithms and can be decoded using iterative decoding algorithms over various quantum 
depolarizing channels. 

14.1 Introduction 

Low density parity check (LDPC) codes are a capacity-approaching {Shannon limit) class of codes that were 
first described in a seminal work by Gallager [02]. In Tanner [ ], LDPC codes were rediscovered and 
presented in a graphical interpretation {codes over graphs). Iterative decoding of LDPC and turbo codes 
highlighted the importance of these classes of codes for communication and storage channels. Furthermore, 
they have been used extensively in many applications [44, 12(3, 127]. 

There have been several notable attempts to construct regular and irregular good LDPC codes using 
algebraic combinatorics and random constructions, see [174, 127], and references therein. Liva et al. [127] 
presented a survey of the previous work done on algebraic constructions of LDPC codes based on finite 
geometries, elements of finite fields, and RS codes. Furthermore, a good construction of LDPC codes should 
have a girth of the Tanner graph, of at least six [127, 120]. 

Quantum information is sensitive to noise and needs error correction, control, and recovery strategies. 
Quantum block and convolutional codes are means to protect quantum information against noise and deco- 
herence. A well-known class of quantum codes is called stabilize codes, in which it can be easily constructed 
using self-orthogonal (or dual-containing) classical codes, see [>)4, l.':5, 97] and references therein. Recently, 
subsystem codes combine the features of decoherence free subspaces, noiseless subsystems, and quantum 
error-correcting codes, see [14, 23, 113, 125] and references therein. 

Quantum block LDPC codes have been proposed in [148, 12!)]. MacKay et al. in [129] constructed sparse 
graph quantum LDPC codes based on cyclic matrices and using a computer search. Recently, Camera el 
al. derived quantum LDPC codes in an analytical method [ ]. Hagiwara and Imai constructed quasi-cyclic 
(QC) LDPC codes and derived a family of quantum QC LDPC codes from a nested pair of classical codes [84]. 
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In this chapter, we construct LDPC codes based on finite geometry. We show that the constructed LDPC 
codes have quasi-cychc structure and their parity check matrices can be adapted to satisfy the self-orthogonal 
(or dual-containing) conditions. The motivations for this work are that (i) LDPC codes constructed from 
finite geometries can be encoded using linear shift-registers. The column weights remain fixed with the 
increase in number of rows and length of the code, (ii) The adapted parity check matrix has exactly one 
cycle with length four between any two rows and many cycles with length of at least six. (iii) A class of 
quantum LDPC codes is constructed that can be decoded using known iterative decoding algorithms over 
quantum depolarizing channels; some of these algorithms are stated in [15U]. 

Notation: Let q he a, prime power p and ¥q be a finite field with q elements. Any two binary vectors 
V = (ui, V2, ■ ■ ■ , Vn) and u = (ui, U2, . . . , Un) are orthogonal if their inner product vanishes, i.e., '^i'^i 
mod 2 = 0. Let H be a parity check matrix defined over F2, then H is self-orthogonal if the inner product 
between any two arbitrary rows of H vanishes. 

14.2 LDPC Code Constructions and Finite Geometries 

14.2.1 LDPC Codes 

Definition 174. An {p, A) regular LDPC code is defined by a sparse binary parity check matrix H satisfying 
the following properties. 

i) p is the number of one's in a column. 

ii) A is the number of one's in a row. 

iii) Any two rows have at most one nonzero element in common. The code does not have cycles of length 
four in its Tanner graph. 

iv) p and A are small in comparison to the number of rows and length of the code. In addition, rows of the 
matrix H are not necessarily linearly independent. 

The third condition guarantees that iterative decoding algorithms such as sum-product or message passing 
perform well over communication channels. In general it is hard to design regular LDPC satisfying the above 
conditions, see [174, 127, 12G] and references therein. 

14.2.2 Finite Geometry 

Finite geometries can be classified into Euclidean and projective geometry over finite fields. Finite geometries 
codes are an important class of cyclic and quasi-cyclic codes because their encoder algorithms can be imple- 
mented using linear feedback shift registers and their decoder algorithms can be implemented using various 
decoding algorithms such as majority logic (MLG), sum-product (SPA), and weighted BF, see [111, 127, 126]. 




Figure 14.1: Euclidean geometry with points 71 = 4 and lines I = 6 

Definition 175. A finite geometry with a set of n points {pi,p2, • ■ ■ ,Pn}, a set of / lines {ii, L2, . . . , Li} 
and an integer pair {X, p) is defined as follows: 

i) Every line Li passes through p points. 

ii) Every point pi lies in A lines, i.e., every point pi is intersected by A lines. 

iii) Any two points pi and pj can define one and only one line Lk in between. 
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Figure 14.2: (a) EG with n ~ 4 points and I — 6 hues (b) The Tanner graph of a sch-orthogonal H matrix. 

iv) Any two hues Li and Lj either intersect at only one point pi or they are parallel. 

Therefore, we can form a binary matrix H = [hij] of size I x n over F2. The rows and columns of H 
correspond the I lines and n points in the Euclidean geometry, respectively. If the ith line Li passes through 
the point pi then hi^ = 1, and otherwise hi^ = 

Fig. 15.2 shows an example of Euclidean geometry with n = 4, Z = 6, A = 3, and p — 2. We can construct 
the incidence matrix H based on this geometry where every point and line correspond to a column and row, 
respectively. For p « I and A << n, The matrix H is a sparse low density parity check matrix. In this 
example, the matrix Heg-/ is given by 



H 



EG-I — 



/ 1 1 \ 
10 10 
10 1 
110 
10 1 

V 1 1 y 



(14.1) 



We call the Euclidean geometry defined in this type as a Type-I EG. The Tanner graph of Type-I EG 
is a regular bipartite graph with n code variable vertices and / check-sum vertices. Also, each variable bit 
vertex has degree A and each check-sum has degree p. 

If we can take the transpose of this matrix 'Reg-i, then we can also define a (p, A) LDPC code with 
length I and minimum distance is at least p+1. The codes defined in this type are called LDPC codes based 
on Type-II EG. In this type, any two rows intersect at exactly one position. 



14.2.3 Adapting the Matrix 'Reg-ii to be Self-orthogonal 

Let 'H.EG-ii be a parity check matrix of a regular LDPC code constructed based on Type-II EG Euclidean 
geometry. We can construct a self-orthogonal matrix 'H.°^^_jj from Heg-ii in two cases. 

Case 1. If the number of one's in a row is odd and any two rows intersect at exactly one position, i.e., 
any line connects two points. As shown in Fig. 14.2, the Tanner graph corresponds to a self-orthogonal parity 
check matrix if and only if every check-sum has even degree and any any two check-sum nodes meet 

at even code variable nodes. This condition is the same as every row in the parity check matrix H°e^_ii has 
an even weight and any two rows overlap in even nonzero positions. 

n'k^'ljj = ( I 1 ) (14.2) 
The vector 1 of length n is added as the last column in H^'^'L//. 



14.3. Constructing Self-Orthogonal Cyclic LDPC Codes from Euclidean Geometry 
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Case 2. Assume the number of one's in a line is even and any two rows intersect at exactly one position. 
We can construct a self-orthogonal parity check matrix 'H.'^^_jj as follows. We add the vector 1 along with 
the identity matrix I of size n x n. We guarantee that any two rows of the matrix H^q'L// intersect at two 
nonzero positions and every row has an even weight. 

Wkt-ii = ( I 1 I I ) . (14.3) 



14.2.4 Characteristic Vectors and Matrices 



Let n be a positive integer such that n — g'" — 1 , where m = ord„ (q) is the multiplicative order of q modulo 
n. Let a denote a fixed primitive element of F^™. Define a map z from F*,„ to such that all entries of 
z(a') are equal to except at position i, where it is equal to 1. For example, z(q;^) = (0, 1, 0, ... , 0). We call 
z{a'') the location (or characteristic) vector of a'^. We can define the location vector z{a'^'^^^^) as the right 
cyclic shift of the location vector z(a'+^), for < j < n — 1, and the power is taken module n. The location 
vector can be extended to two or more nonzero positions, for example, the location vector of a^, and 
is given by z(a^, a^, a^) = (0, 1, 1, 0, 1, 0, . . . ,0). 



Definition 176. We can define a map A that associates to an element F* 



a circulant matrix in F2 ^" 



by 



z(a'+i) 



(14.4) 



By construction, A(c^^ contains a 1 in every row and column. 



We will use the map A to associate to a parity check matrix iJ = (Jiij ) in (F*,„ ) the (larger and binary) 
parity check matrix H = (A(/iij)) in Fj^". The matrices A(h,ij)' s are n x n circulant permutation matrices 
based on some primitive elements hij as shown in Definition 196. 



14.3 Constructing Self- Orthogonal Cyclic LDPC Codes from Eu- 
clidean Geometry 

In this section we construct self-orthogonal algebraic Low Density Parity Check (LDPC) codes based on 
finite geometries. Particulary, there are two important classes of finite geometries: Euclidean and projective 
geometry. 



14.3.1 Euclidean Geometry EG{m,q) 

We construct regular LDPC codes based on lines and points of Euclidean geometry. The class we derive has 
a cyclic structure, so it is called cyclic LDPC codes. Cyclic LDPC codes can be defined by a sparse parity 
check matrix or by a generator polynomial and can be encoded using shift-register. Furthermore, they can 
be decoded using well-known iterative decoding algorithms [12(), 127]. 

Let q be power of a prime p, i.e. q = p'' for some integer s > 2. Let EG{m, q) be the m-dimensional 
Euclidean geometry over Fg for some integer m > 2. It consists of p™* = q'" points and every point is 
represented by an m-tuple, see [1) 1]. A line in EG{'m,q) can be described by a 1-dimensional subspace of 
the vector space of all m-tuples over Fg or a coset of it. The number of lines in EG{m, q) is given by 

(g™-i)(<z"-l)/(g-l), (14.5) 

and each line passes through q points. Every line has ^('"^i) — 1 lines parallel to it. Also, for any point in 
EG{m,q), there are 



(r-l)/(g-l), 



(14.6) 
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lines intersect at this point. Two lines can intersect at only one point or they are parallel. 

Let ¥qm be the extension field of ¥q. We can represent each element in F^™ as an m-tuple over ¥q. Every 
element in the finite field F,™ can be looked as a point in the Euclidean geometry EG{m, q), henceforth F^™ 
can be regarded as the Euclidean geometry EG{m, q). 

Let a be a primitive element of F^m . 5™ points of EG{m, q) can be represented by elements of the set 
{0, 1, a, a^, . . . , a'' ~^}. We can also define a line L as the set of points of the form {a + 7 b | 7 € Fg}, where 
a and b are linearly independent over F^. For a given point a, there are (g™ — l)/(g — 1) lines in EG{m, q) 
that intersect at a. 

Type-I EG. Let n — q™ — 1 be the number of points excluding the original point in EG{m, q). Assume 
L be a line not passing through 0. We can define the binary vector 

VL = . . . ,w„), (14.7) 

where Vi — 1 ii the point a' lies in a line L. The vector v/, is called the incidence vector of L. Elements of 
the vector v^, correspond to the elements 1, a, o? ^ . . . , a"~^. olL is also a line in EG(rn, q), therefore av^ is 
a right cyclic-shift of the vector v^,. Clearly, the lines L, aL, . . . , a''^~^L are all different. But, they may not 
be linearly independent. 

Consider the vectors Li, aLi, . . . , a"~^Li. We can construct an n x n matrix Hi in the form 



Hi 



( \ 



fl4.. 



Clearly, Hi is a circulant matrix with column and row weights equals to q, the number of points that lie in 
a line a' Li, for Q < j < n — 1. Hi has size of n x n. The total number of lines in EG{m, q) that do not pass 
through the origin are given by 



(9 



m — 1 



l)(r-l)/(g-l) 



They can be partitioned into {q'' 
by an incidence vector Li as {L 
^^m-i _ iy(^q _ 1)^ then Heg/ is defined as 



^ — l)/((7 — 1) cyclic classes, see [127]. 
aL,,a^L,,...,a"'-^L,} for 1 < i < (g" 



Every class Hi 
-'-l)/iq-l). 



(14.9) 

can be defined 

Let 1 < f < 



Hi H2 



Hi 



(14.10) 



For each cyclic class Hi, we can form the matrix Hi over F2 of size n x n. Therefore, is a circulant 
binary matrix of row and column weights of q. 

If we assume that there are I < £ < (g™~^ — l)/{q— 1) incidence lines in EG{m, q) not passing through 
the origin, then we can form the binary matrix 



Hi H2 



H, 



(14.11) 



The matrix YLeg,i consists of a £ sub-matrices Hi of size n x n and it has column and row weights £q and 
q, respectively. The null space of the matrix HEce gives a cyclic EG-LDPC code of length n — q"^ — 1 and 
minimum distance £q + 1, whose Tanner graph has a girth of at least six, see [174, 127]. 

The Tanner graph of Type-I EG is a regular bipartite graph with g™ — 1 code variable vertices and I 
check-sum vertices. Also, Each variable bit vertex has degree p = q and each check-sum has degree A = £q. 

Type-II EG. We can take the transpose of the parity check matrix H[eg,i) over Fgm as defined in 
Type-I to define a new parity check matrix with the following properties, see [HI]. 



H 



EG,i 



= Hf 



Ho 



(14.12) 



So, the matrix Hj is the transpose matrix of Hi. Consequently, we can define the binary matrix H^g^^ 
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Ula,i^ [ ... Hf J. (14.13) 

Let £ — — l)/{q — 1), then the matrix li%Q g has the following properties 

i) The total number of columns is given by £n — (g™^^ — — l)/(9 — 1). 

ii) Number of rows is given by ti = — 1. 

iii) The rows of this matrix correspond to the nonorigin points of EG{m, q) and the columns correspond to 
the lines in EG{m, q) that do not pass through the origin. 

iv) \ = lq^ q{q"'-'^ - l)/(g- 1) = (g™ - l)/(g- 1) - 1 is the row weight for £ = - l)/(g- 1). Also 
p = q is the column weight. 

v) Any two rows in H^q ^ have exactly one nonzero element in common. Also, any two columns have at 
most one nonzero element in common. 

vi) The binary sub-matrix has size (g™ — 1) x {q"^ — 1). Also, it can be constructed using only one 
vector Vi that will be cychcally shifted — 1 times. 



14.3.2 QC LDPC Codes 

The matrix U^^j, defines a quasi-cycHc (QC) LDPC code of length N ^ in ^ [q("i-i) _ i)(-^m _ ^y^^ _ 
for £ = (g™^^ — l)/((7 — 1). The matrix H^q ^ has n = — 1 rows that are not necessarily independent. We 
can define a QC LDPC code over F2 as the null-space of the matrix ii%Q g of sparse circulant sub-matrices 
of equal size. The matrix g with parameters (p, A) has the following properties. 

i) p — q is the weight of a column q. p does not depend on m, hence length of the code can be increased 
without increasing the column weight. 

ii) X = £q is the weight of a row r^. A depends on m, but the length of the code increases much faster than 
A. 

iii) Every two columns intersect at most at one nonzero position. Every two rows have exactly one and only 
one nonzero position in common. 

Prom this definition, the minimum distance of the LDPC code defined by the null-space of 11%q g is at 
least p+l. This is because we can add at least p+1 columns in the parity check matrix H^Jq g to obtain the 
zero column (rank of g is at least {p + 1)). Furthermore, the girth of the Tanner graph for this matrix 
Hi is at least six, see [44, 174]. This is a {p, A) QC LDPC code based on Type-II EG. 



14.3.3 Self-orthogonal QC LDPC Codes 



We can define a self-orthogonal parity check matrix ll°^^g from Type-II EG construction as follows. The 
binary matrix H^q g of size nx in for 1 < £ < (g™^^ — l)/(g — 1) has row and column weights of \ ^ iq and 
p = q, respectively. Let 1 be the column vector of size (g™ — 1) x 1 defined as 1 = (1, 1, ... , 1)"^. If the weight 



of a row in H 



EC- 



is odd, then we can add the vector 1 to form the matrix H' 



rth 
EG.i 



H 



EG,. 



Also, if 



the weight of a row in H^Jq g is even, then we can add the vector 1 along with the identity matrix of size 
(g™ - 1) X (g™ - 1) to form ll°j^G^g 
as shown in the following Lemma. 



H 



EG,' 



HI 



Therefore, we can prove that H'^q^ is self-orthogonal 



Lemma 177. The parity check matrix H°^^g defined as 



H°EG 



th 



iff Hi 



Hi Hi 



H 



, for odd £q; 



Hg \ 1 \ I , for even £q 



is self-orthogonal. 

Proof. From the construction Type-II EG, any two different rows intersect (overlap) in exactly one nonzero 
position. If £q is odd, then adding the column vector 1 will result an even overlap as well as rows of even 
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weights. Therefore, the inner product mod 2 of any arbitrary rows vanishes. Also, if Iq is even, adding 



the columns 



1 I I 



will produce row of even weights and the inner product mod 2 of any arbitrary rows 



vanishes. □ 

ti.EG^i has size n x TV for odd iq where n = q'" - 1, iV = n£ + 1, and 1 < £ < - l)/(q - 1). Also, 

it has length N = n{l-\- \) + 1 for even Iq. 

The minimum distance of the LDPC codes constructed in this type can be shown using the BCH bound 
as stated in the following result. 

Lemma 178. The minimum distance of an LDPC defined by the parity check matrix H^^^ is at least q+1. 

14.4 Quantum LDPC Block Codes 

In this section we derive a family of LDPC stabilizer codes derived from LDPC codes based on finite geome- 
tries. Let P = {I, X, Z,Y = iXZ} be a set of Pauli matrices defined as 

and the matrix Y is the combination of the matrices X bit-flip and Z phase-flip defined as y = iXZ = 
^ * Clearly, 







X^ = Z^ = Y^ = I. 



A well-known method to construct quantum codes is by using the stabilizer formalism, see for example [4, 
34, 70, 129] and references therein. Assume we have a stabilizer group S generated by a set {Si, S2, ■ ■ ■ , Sn~k} 
such that every two row operators commute with each other. The error operator Sj is a tensor product of n 
Pauli matrices. 

Sj ^ Ei(^E2(^ ...(^ En, Ei e P. 

Sj can be seen as a binary vector of length 2n [129, 34]. A quantum code Q is defined as +1 joint eigenstates 
of the stabilizer S. Therefore, a codeword state \tp) belongs to the code Q if and only if 

Sj = \tjj) for aU Sj e S. (14.15) 

CSS Construction: Let G and H be two binary matrices define the classical code C and dual code C"*", 
respectively. The CSS construction assumes that the stabilizer subgroup (matrix) can be written as 



S = 



H 





G 



(14.16) 



where H and G are k x n matrixes satisfying HG^ = 0. The quantum code with stabilizer S is able to 
encode n — 2k logical qubits into n physical qubits. If G = H, then the self-orthgonality or dual-containing 
condition becomes HH"^ = 0. If C is a code that has a parity check matrix H, then C C. 
Constructing Dual-containing LDPC Codes: Let us construct the stabilizer matrix 



^stab 



{"0 D- 







The matrix H'^^i is a binary self-orthogonal matrix as shown in Section 14.3.3. We replace every nonzero 
element in H]^^^ by the Pauli matrix X to form the matrix Hx ■ Similarly, we replace every nonzero element 
in 11"^^^ by the Pauli matrix Z to form the matrix Hz- Therefore the matrix Sstab is also self-orthogonal. 
We can assume that the matrix Hx corrects the bit-flip errors, while the matrix Hz corrects the phase-flip 
errors, see [129, 4]. 

Lemma 179. A quantum LDPC code Q with rate {n— 2k) /n is a code whose stabilizer matrix Sstab of size 
2k X 2n has a pair [p, A) where p is the number of non-zero error operators in a column and A is the number 
of non-zero error operators in a row. Furthermore, Sstab is constructed from a binary self-orthogonal parity 
check matrix H°Ecti '^I ^^^^ k x n. 
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Using Lemma 179 and LDPC codes given by the parity check matrix H^'^''^ as shown in Section 14.3.3, 
we can derive a class of quantum LDPC codes as stated in the following Lemma. 

Theorem 180. Let H°^'^g be a parity check matrix of an LDPC code based on EG{m, q), where n = — 1 
and 1 < i < (q™^^ — l)/(g — 1) . Then, there exists a quantum LDPC code Q with parameters [[N, N — 2n, > 
q + 1]]2 where N — £n + 1 for odd iq and N — {£ + l}n + 1 for even £q. 

Proof. By Lemma 177, H^^^^g is self-orthogonal. Using Lemma 179, there exists a quantum LDPC code with 
the given parameters. □ 



14.5 Conclusion 

We constructed a class of quantum LDPC codes derived from finite geometries. The constructed codes have 
high rates and their minimum distances are bounded. They only have one cycle of length four between any 
two rows and many cycles of length of at least six. A new class of quantum LDPC codes based on projective 
geometries can be driven in a similar way. 



CHAPTER 15 



Quantum LDPC Codes Derived from 
Latin Squares 



In this chapter I construct a class of regular Low Density Parity Check (LDPC) codes derived from Latin 
squares. The parity check matrices of these codes are constructed by permuting orthogonal Latin squares 
of order n in block-rows and block-columns. I show that the constructed LDPC codes are self-orthogonal 
and their minimum and stopping distances are bounded. This helps us to construct a family of quantum 
LDPC block codes. Consequently, I demonstrate that these constructed codes have good error correction 
capabilities and can be decoded using iterative decoding algorithms similar to their classical counterpart. 
Therefore, this work shows that cycles of length 4 in the Tanner graphs of the parity check matrices do not 
greatly affect performance of LPDC codes if they can be distributed regularly. 

15.1 Introduction 

Low Density Parity Check (LDPC) codes are a capacity approaching {Shannon limit) class of codes that first 
appeared in a seminal work by Gallager [d.!]. LDPC codes were rediscovered by Tanner [ ], in which he 
showed the interpretation graphical view of these codes {codes over graphs). Iterative decoding of LDPC and 
turbo codes highlighted these codes as important classes of codes (modern coding theory) for communication 
and storage channels. Furthermore, they have been used intensively in many applications [44, 126]. Rather 
than, BCH and Reed-Solomon cyclic codes, LDPC codes are often historically constructed by a computer 
search. Also, their encoding complexity is high in comparison to other codes. However, LDPC codes have high 
performance and better error correction capabilities because they have iterative decoding algorithms [185, 
174, 127, 120]. 

Quantum information is sensitive to noise and needs error correction strategies. Quantum block and 
convolutional codes are means to protect quantum information. Quantum block LDPC codes have been 
introduced using a computer search by MacKay in [ ]. He constructed sparse graph quantum codes from 
classical LDPC codes. Recently, Camera el al. derived quantum LDPC codes in an analytical method [.Hfi]. 
Quantum convolutional codes {quantum memory codes) are an alternate to quantum blocks codes {quantum 
memoryless codes). Quantum convolutional codes promise to make quantum communication more reliable 
because of their online encoding and decoding algorithms, see [SI, ■'39, 15]. 

We investigate the problem of constructing good quantum error correcting codes. Recently, Hagiwara 
and Imai constructed quasi-cyclic (QC) LDPC codes and derived a family of quantum QC LDPC codes from 
a nested pair of classical codes [ ]. In our work we establish sufficient conditions for the parity check matrix 
H of a LDPC code to be self-orthogonal. 

In this chapter, a new class of quantum LDPC codes based on our construction of LDPC codes is proposed. 
We derive regular LDPC codes from elements of finite fields {Latin squares) and algebraic combinatorics [15]. 
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Quantum LPDC block codes constructed in this chapter have some advantages; (a) quantum block codes 
constructed from LDPC are good codes as shown by MacKay et al. [129], (b) LDPC codes are capacity 
achieving codes and have high rates, (c) the constructed codes can be decoded using standard iterative 
decoding algorithms. 

The constructed codes have cycles with length 4 to guarantee self-orthogonality as we will show in sec- 
tion 15.2. Moreover, we show that the performance of these codes is reasonable and can be improved by 
reducing the number of 4-cycles in the parity check matrix. We also note that the these codes have high rates. 
This is due to the fact that we try to have less 4-cycle, dimension of the parity check matrix is reduced, i.e. 
R> 1 — k/n. Finally, performance of our constructed codes can be improved by shortening and puncturing 
the parity check matrices of these codes to reduce the number of cycles with length 4. 

Notation: We will refer to a row of matrices (block) as a block-row and a regular row of elements through 
out some matrices as a row. This is also applied to a block-column. 

15.2 Classical and Quantum LDPC Codes 

In this section we introduce quantum and classical LDPC codes. Our goal is to make this chapter as self- 
contained as possible. 

15.2.1 Quantum LDPC Codes 

Quantum LDPC first appeared in a paper by Mackay el. al. in [ ]. He showed that good quantum block 
codes can be constructed from classical codes with low-weight codewords. So, it is not necessary to start 
with a good classical code that has high minimum distance. He showed analytically that: 

Proposition 181. A (p, A, 7i)-LDPC code is a dual-containing code if it has a parity check matrix H over F2 
such that 

i) Every row has fixed weight A and every column has fixed weight p. 

ii) Every pair of rows in H has an even overlap, and every row has even weight, meaning every pair of rows 
is multiplicity even. 

MacKay used the random construction of LDPC codes to derive quantum codes. Recently, Camara el al. 
showed quantum convolutional LDPC codes using analysis method [•']()]. They presented a class of quantum 
codes that can be decoded using iterative algorithms. We now can define quantum LDPC codes using the 
row and column weights. 

Definition 182. A quantum LDPC code is a code whose stabilizer matrix Sstab has a pair {p, A) where p is 
the number of non-zero error operators per column and A is the number of non-zero error operators per row. 

For the binary case, the error operator can be an element in the Pouli group generated by the matrices 
{I,X, Z,Y ^iXZ}. 

15.2.2 Classical LDPC Codes 

LDPC codes, whether they are block or convolutional, have better encoding and decoding algorithms in 
comparison to other codes. In fact this class of codes can be encoded using shift register circuits, see for 
example [i 74, 173, 129, 1(S5] and the recent survey paper [127]. LDPC codes that have an algebraic structure 
are superior because i) they perform well in terms of bit and block error probabilities, and ii) they are easy 
to encode and decode. 

We pursue our construction by defining some terms. Let Fg be a finite field with q elements. We can 
define a QC-LDPC code over Fg as the null-space of a matrix H of sparse circulants of equal size. The matrix 
H with parameters (p, A) has the following properties: 

1. p is the weight of a column c^, 

2. A is the weight of a row r^. 

From this definition, the minimum distance of the QC-LDPC defined by the null-space of H is at least p+1. 
This is because we can add at least p-\-l columns in the parity check matrix H to get the zero column (rank 
of H is at least p -I- 1). Furthermore, the girth of the Tanner graph for this matrix H is at least 6, see [J 4]. 



114 



Chapter 15: Quantum LDPC Codes Derived from Latin Squares 



Consider q — for some prime p and positive integer m > 2. Let a be a primitive element in ¥q 



The finite field Fp 

-2 ^9 



can be generated by some primitive elements a' for 1 < i < p. So, the set S — {c 



1, a, Q!'^, . . . , a'^"'^, a'"^ — l,a°° — 0} form all elements in Fpm. Clearly if to = 1, then there are q—l 
primitive elements in this field. We also note that the set 5\{0}, equivalently F*, form a multiplicative group 
of order n. This is a curial part of our construction. 



Every nonzero element a* in can be written as a zero vector of length n 



i. So, z(a*) = {zo,zi, . 



i) for 2j 



a- 



and Zj = where i ^ j. Also, z(0) 



: q — I except at position 
(0,0,..., 0). Clearly, the 



weight of the vector z(a*) is equal to one. We will assume the vector z is defined over F2 instead of Fq. For 
example, z(a^) = (0, 1, 0, ... , 0). 

Let 7 be a nonzero element in ¥q. We can define the location vector zi^ja^) as the cyclic shift of the 
location vector z(a'). Let A he a. n x n matrix over F2. 



A 



\ z(7"-ia*) J 



(15.1) 



From this construction every row or column of the matrix A contains only one nonzero entry. Now, 
we give two definitions to measure the performance of the decoding algorithms of LDPC codes: girth of a 
Tanner graph and stopping sets. The minimum stopping set is analogous to the minimum Hamming distance 
of linear block codes. 



Definition 183 (Girth of a Tanner graph). The girth g of the Tanner graph is a length of its minimum 
cycle. 

The stopping set of a Tanner graph is a subset of the variable nodes V such that its neighboring check 
nodes in L are connected to at least two nodes in this subset as shown in the following definition. The 
stopping distance is the size of the smallest stopping set and it determines the number of correctable erasures 
by an iterative decoding algorithm, see for example [142, 16G, 48]. 



Definition 184 (Stopping sets). The set 5 C C is called the stopping set of a graph G — {V,C,E) if the 
degree of each vertex in r(iS') in the induced graph Gs on S U T{S) is at least two, where r(S') is the set of 
neighbors of S in V. 

Let s be the size of the smallest stopping set, i.e., s is the stopping distance (number). We can also define 
the stopping distance from H directly as follows [ LGG]. 

Definition 185 (Stopping distance). The stopping distance of the parity check matrix H is defined as the 
largest integer s(H) such that every set of (s(H) — 1) or less columns of H contains at least one row of weight 
one. 

The stopping ratio cr of the Tanner graph is defined by s/n. The minimum Hamming distance is a 
property of the code to measure its performance for maximum-likelihood (ML) decoding, while the stopping 
distance is a property of the parity check matrix H or the Tanner graph G of a specific code. Hence it 
varies for different choices of H for the same code C. The stopping distance s(H) gives a lower bound of the 
minimum distance of the code C defined by a the low density parity check matrix H. Hence, 

S(H) < drmn- (15.2) 

It has been shown that finding the stopping sets with minimum cardinality is an NP-hard problem since the 
minimum-set vertex covering problem can be reduced to it [ . j ]. One can also define the trapping sets for 
AWGN and BSC communication channels. 
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15.3 Constructing LDPC Codes From Latin Squares 

In this section we construct self-orthogonal algebraic Low Density Parity Check (LDPC) codes derived from 
Latin squares. The class that we show has a quasi-cyclic (QC) structure and hense is is called QC-LDPC 
codes. There have been some constructions of LDPC and QC LDPC based on Latin squares such as the 
construction in [1'">T] based on mutually orthogonal and cyclic Latin squares. Also, in [13(), IIS] the authors 
designed LDPC codes based on idempotent and symmetric Latin squares. These constructions are beneficial 
because they have girth of at least 6 and the codes are regular and irregular with arbitrary rates. In addition, 
the authors computed the stopping sets to measure performance of LDPC codes over the binary erasure 
channel. 

15.3.1 Latin Square 

A Latin square of order n is a square matrix of size nxn defined over F* or (i.e., Zq) such that each element 
a* G Fq appears only once in every row and column. Clearly many Latin squares can be defined over the same 
alphabet, but the exact number is not know for large n. Latin squares have been used in many applications 
and there are various methods to construct them. In addition, there is a connection between Latin squares 
and permutation groups. In other words, one can look at a permutation group of order n as a Latin squares 
of order n. We can define the main and isotopy classes of Latin squares as follows, see [133, 118, 95]. 

Definition 186. Let L and L' be two Latin squares of order n. 

i) If the square L' can be obtain from L under row, column and symbol permutations, then L is isotopy 
to V . The set of all Latin squares isomorphic to L is called isotropy class. 

ii) The main class of L is given by the set of all squares which are isomorphic to some conjugate of L. 
Paratopic squares are a set of squares which belong to the same main class. 

iii) We call a Latin square L of order n reduced if (1, 2, 3, . . . , n) appears in the first row and column. 

iv) For I < k < n, a, Latin rectangle is an array of size k x n such that every element appears once in a row 
and may or may not appear in a column. Clearly, Latin squares are special cases of Latin rectangles 
where k = n, see [135]. 

Let Rn be the total number of reduced Latin squares, the total number of Latin squares of order n is 
given by 

i„ = n!(n- l)!i?„. 
We can also study properties of some classes of Latin squares. 

Definition 187. Let L and L' be two Latin squares of order n 

i) L is orthogonal to L' if the cell in L is different from the cell (i,j) in L' for all 2 < i < n and 
1 < j < n. 

ii) There are at most n— 1 mutually orthogonal Latin squares of order n. Therefore, the set ii, L2, ■ ■ ■ , L„-i 
is mutually orthogonal if Li and Lj are orthogonal for l<i<j<n — 1. 

As an example, two orthogonal Latin squares of order n — A are given by 
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(15.3) 



One way to obtain all orthogonal Latin squares is by fixing the first row and permute all other rows by 
one to obtain a new square matrix. Therefore, we have n — 1 permuted orthogonal Latin squares. 

Latin squares have been used to construct efficient LDPC codes, see [13G, 118]. A Latin square L of order 
n is idempotent if the cell (j,j) contains the symbol i for 1 < i < n. L is symmetric if the cells (i,j) and 
(j, i) for 1 < z < j < n contain the same symbol. We define a special class of Latin squares called Cayley 
Latin squares where the elements {1, . . . , n} form a cyclic group of order n. 

Theorem 188. The Latin square L derived from the Cayley table of a group G is atomic if and only if G 
is a cyclic group of prime order. 
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Proof. See [188]. 



□ 



Clearly, the transpose of a (orthogonal) Latin square is also a (orthogonal) Latin square. We can also 
define the minimum distance between two rows in a Latin square as the number of nonzero elements in the 
difference among these two rows. We can see that the Hamming distance between any two rows of an rt x n 
Latin square is n. 



15.3.2 A Class of LDPC 

We construct a class of LDPC based on primitive elements of a finite field ¥q. For simplicity, let us assume 
g is a prime. This is equivalent to constructing a Latin square of order n = q — I. 

Let a* be an element in for 1 < i < n such that gcd(a% q) = 1. Let S be the set of primitive elements 



excluding 1, S — {a^,( 
group Z/gZ 



, a"}. We can form the matrix G of size n x n as a result of the multiplicative 
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(15.4) 



J 



where gi is the ith row in G and hj is the jth column in G. The matrix G has the following structure: 

i) any two distinct rows differ in all positions. 

ii) any two distinct columns differ in any positions. 

iii) all elements of the field are presented in a row (column) . 

This matrix G is equivalent to the Latin square of order n. We know that there are n — 1 orthogonal Latin 
squares of order n, we call them Bi, B2, . . . , Bn-i where G = Bi. 

We form the matrix B by permuting rows of the matrix G in a certain order. So, the matrix Bj is a 
permutation of the matrix Bi under row permutation. 



B^{ Bi B2 ... S„_i ). (15.5) 

We have formed an n x (n — l)n matrix B where every row in G is extended horizontally (n — 1) times. 

Corollary 189. Any two rows in the matrix B differ in all positions. I.e., B is a self- orthogonal matrix. 

Proof. This is a direct consequence of our construction. Any two rows of the matrix Bj satisfies this condition. 
Therefore, any two rows in all matrices Sj's are orthogonal. Also, for any length n, the multiplication (n— l)n 
is even. Therefore, the inner product of a row by itself always vanishes. □ 



We can also see that the Hamming distance between any two rows of the matrix B is n{n — 1). This is 
because any two rows in the sub-matrix Bi have Hamming distance equal to zero. 
We can also extend every matrix Bj in B vertically to form the matrix 
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(15.6) 
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where the element hi^j^i is a column of n elements. Now the matrix Hj has size {p)n x n. Therefore we 
formed a {p)n x (n — l)n matrix H . 



H — ( -^1 ^2 ^^3 



(15.7) 



The matrix Hj has the following properties: 

i) Every n components of every column are distinct and they form all the n nonzero elements of F* . 

ii) any two columns differ in every position. 

iii) Any two rows have even number of elements in common. 

Lemma 190. For 1 < i,j < pn, i ^ j, any two rows gi and gj in H have no common symbol from ¥q or 
they have an even number of symbols in common. 

Proof. The proof is straightforward from the construction of the matrix H and permutations of its rows and 
columns, the block Bj^i is an orthogonal Latin square and a row permutation of the block Bj-i^^i . □ 

We now can replace every entry in H by its location vector to obtain a {p)n x (n — l)n^ matrix 

g, = [ A,- 1 Aj, 2 . . . A,,„_i ] , (15.8) 

We construct the p x (n — l)n matrix H of n x n submatrices over F2. 



H 



( Gi \ 

Q2 



^2.1 ^2,2 



P,2 



^21n-l 



(15.9) 



and the matrices are n x n'^ circulant permutation matrices of Latin squares. 

By this construction we built an pn x (?i — l)rt^ matrix H over F2, where we replace a* by 1 at position 
i in the vector z(a'). The previous steps are summarized in algorithm 15.1. We notice that the row weight 
of H is (n — l)n and the column weight is p. 



15.3.3 Parameters of LDPC Codes 



Let p and A be two integers such that 1 < p < A < ?i. Let H{p, A) be a sub-matrix of the matrix H satisfying 
the row (column) constraints as above. The parameter p represents the number of nonzero positions in a 
column; p is a weight of a column. Also, the parameter A represents the number of nonzero positions in a 
row; A is a weight of a row. We can always assume that X = n — I for the Latin square construction. The 
null-space of the matrix H(p, A) gives a (p, A) regular dual-containing LDPC code of length Xn^ and rate 
(An — p)/Xn. The minimum distance of the code is > p. This construction gives a class of regular LDPC 
codes. 
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1: Input: A finite field GF{q), where q is a prime, 

2: Output: A parity check matrix H of size pn x (n ~ l)n'^. 

3: Construct the matrix G as the multiphcation group of F*, Latin square of order n = q — I. 

4: for j = 1 to (n-1) do 

5: construct the sub-matriees Bi,B2, ...,Bn-i as orthogonal Latin squares. 

6; end for 

7: for j = 1 to n-1 do 

8: for each sub-matrix Bj construct the column submatrices Hij. 

9: end for 

10: Form the matrix H. 

11: Convert every element in iJ to a locator vector to form the matrix H. 

Figure 15.1: Constructing LDPC codes based on elements of a finite field (Latin Square) 



Theorem 191. For a prime integer q, the regular LDPC code generated by the parity check matrix H is 
dual- containing and it has rate ■ ■ 

Proof. We need to show that the matrix Qj is also self-orthogonal as well as Qj x Qf = for 1 < i < p. 

i) Since g is a prime, then n is an even integer. Let gi and gk be two rows in Qj over F2. Then gk must be 
a permutation of the row gi for k ^ I, hence they do not intersection at any position or they have even 
weight of their inner product. So, gi * g^ — 0- Now, for I — k, from the assumption n is even and gi has 
exactly one nonzero element, therefore, gi has even weight (multiplicity even), hence it is self-orthogonal. 

ii) Now, let us choose any two arbitrary rows gji in Qj and gik in Qi. Using a similar argument as in i) one 
can show that gji * gfi^ =0. 

iii) The claim about the rate comes from our algorithm in Fig. 15.1. The result follows. 

□ 

Lemma 192. The stopping distance of LDPC codes derived from Latin squares is exactly n. 

Proof. By applying Definition 185, one can see that the number of columns that have rows with weight one 
is n. □ 

By a similar argument one can also compute the stopping set and number of cycles with length 4. 
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Figure 15.2: Performance of a (4,30) LDPC code with parameters (156,180) based on Latin squares 
We finish this construction by giving an example. 
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Example 193. Let q = 5 

matrix is give by 



n + 1 and a be a primitive element in ¥q. Let X — n—1 and p — 2, the generator 
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One can construct the matrices B, H and H, and can check that the matrix H{2, 12) is self-orthogonal. 
The matrix B is given by 



B = 



B, 



where Bi — G and 



B2= 
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Also, the matrices H and H are shown in Equations 15.10 and 15.11. 



15.4 Quantum LDPC Block Codes 

In this section we derive a family of stabilizer codes based on self-orthogonal LDPC codes constructed from 
elements of orthogonal Latin squares as shown in section 15.3. Let us construct the stabilizer matrix 



o _ ( Hx 

'-'stab — 1 g 



(15.14) 
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The matrix H is a binary self-orthogonal matrix, where we replace every nonzero element in H by the 
Pauli matrix X to form the matrix Hx ■ Similarly, we replace every nonzero element in H by the Pauli matrix 
Z to form the matrix Hz- Therefore the matrix Sstab is also self-orthogonal. We can assume that the matrix 
Hx corrects the bit-flip errors, while the matrix Hz corrects the phase-flip errors, see [i "-•']■ 

Proposition 194. A quantum LDPC code Q with rate {n — 2k) /n is a code whose stabilizer matrix Sstab of 
size 2k x 2n has a parity check matrix H with pair (p. A) where p is the number of non-zero error operators 
in a column and A is the number of non-zero error operators in a row. 

We now give a family of quantum LDPC codes constructed from self-orthogonal LDPC codes that is 
based on elements of Latin squares. 

Lemma 195. Let n be the order of a Latin square where q = n + 1 for some prime q. Let H(p, A) be a parity 
check matrix of a LDPC code over ¥2 with column weight p and row weight A. Then, there exists a quantum 
LDPC code with parameters [[\n, Xn — 2np, > p\]2. 

Proof. We know that there exists a regular LDPC code with a parity check matrix H constructed from Latin 
squares of order n = q — 1, see steps in Fig. 15.1. The matrix H of size pn x An has row weight p and column 
weight A = n{n— 1). From Theorem 191, the parity check matrix H is self-orthogonal and by Proposition 194 



The quantum code is also defined over F2 and has parameters [[A^, Af, (imi„]] where N ~ Xn and M = 
Xn — 2pn, and dmin > P- 



The stabilizer matrix of the quantum code Q is derived from a QC-LDPC code. Consequently, we can use 
any classical iterative decoding algorithm to estimate error operators. A step in this regard has been taken 
by Camara el al. in [3G]. They also constructed regular LDPC code from group theory. We can conclude 
that our method of constructing QC-LDPC codes is simple and benefits from iterative decoding algorithms 
as well as easy encoders. 

15.5 Discussion 

We note that the constructed codes have reasonable performance in comparison to MacKay's work in random 
constructions of LDPC codes. 

LDPC codes shown in [ ] and [ ] have good performance because these constructions of LDPC 
based on Latin squares do not need the parity check matrices to be self-orthogonal. So, they have fewer 
(orthogonal) Latin squares spread in the parity check matrices. In comparison to our work, we have reasonable 
performance, and our parity check matrices are self-orthogonal, consequently they have some cycles of length 
4. Based on our work, we can highlight the following issues: 

i) It will be interesting to bound the maximum number of 4-cycle in the parity check matrix. In our 
construction, it can be checked that the upper bound is the length of the Latin squares, but this is not 
a tight bound since many rows in the parity check matrix have at most 2 or 4 positions in common. 

ii) Other constructions of LDPC codes based on finite geometry might give better performance of self- 
orthogonal LDPC codes. In addition, the minimum distance and the stopping set of these codes can be 
computed easily. 

iii) Cyclic LDPC and QC LDPC are beneficial codes because, in addition to their iterative decoding algo- 
rithms, they have efficient encoding algorithms using shift registers. 

15.6 Conclusion 

We introduced a family of quantum LDPC codes based on Latin squares. Our construction is simple in 
comparison to other constructions that use random approaches. Furthermore, one can use iterative decoding 
algorithms to decode these codes. We plan to derive more families of quantum LDPC and convolutional 
codes. 



it defines a stabilizer matrix in the form Sstab 




□ 



CHAPTER 16 



Families of LDPC Codes Derived from 
Nonprimitive BCH Codes and 
Cyclotomic Cosets 



Low-density parity check (LDPC) codes are an important class of codes with many apphcations. Two 
algebraic methods for constructing regular LDPC codes are derived - one based on nonprimitive narrow- 
sense BCH codes and the other directly based on cyclotomic cosets. The constructed codes have high rates 
and are free of cycles of length four; consequently, they can be decoded using standard iterative decoding 
algorithms. The exact dimension and bounds for the minimum distance and stopping distance are derived. 
These constructed codes can be used to derive quantum error-correcting codes. 

16.1 Introduction 

Bose-Chaudhuri-Hochquenghem (BCH) codes are an interesting class of linear codes that has been inves- 
tigated for nearly half of century. This type of codes has a rich algebraic structure. BCH codes with 
parameters [n, k,d > 6]q are interesting because one can choose their dimension and minimum distance once 
given their design distance S and length n. A linear code defined by a generator polynomial g{x) has dimen- 
sion k = n — deg{g{x)) and rate k/n. It was not an easy task to show the dimension of nonprimitive BCH 
codes over finite fields. In [Hi, 1.'!], we have given an explicit formula for the dimension of these codes if their 
deigned distance 6 is less than a constant (Smax- 

Low-density parity check (LDPC) codes are a capacity-approaching {Shannon limit) class of codes that 
were first described in a seminal work by Gallager [(i2]. Tanner in [ •■->] rediscovered LDPC codes using a 
graphical interpretation. A regular (p, A) LDPC code is measured by the weights of its columns p and rows 
A. Iterative decoding of LDPC and turbo codes highlighted the importance of these classes of codes for 
communication and storage channels. Furthermore, these codes are practical and have been used in many 
beneficial applications [44, 12(1]. In contrast to BCH and Reed-Solomon (RS) cyclic codes, LDPC cyclic codes 
with sparse parity check matrices are customarily constructed by a computer search. In practice, LDPC codes 
can achieve higher performance and better error correction capabilities than many other codes, because they 
have efficient iterative decoding algorithms, such as the product-sum algorithm [185, 128, 127, 12(i]. Some 
BCH codes turned out to be LDPC cyclic codes as well; for example, a (15, 7) BCH code is also an LDPC 
code with a minimum distance five. 

Regular and irregular LDPC codes have been constructed based on algebraic and random approaches [174, 
49, 173], and references therein. Liva et al. [127] presented a survey of the previous work done on algebraic 
constructions of LDPC codes based on finite geometry, elements of finite fields, and RS codes. Yi et al. [189] 
gave a construction for LDPC codes, based on binary narrow-sense primitive BCH codes, and their method 
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is free of cycles of length 4. Fm-thermore, a good construction of LDPC codes should have a girth of the 
Tanner graph, of at least 6 [127, 12(i]. One might wonder how do the rates and minimum distance of BCH 
codes compare to LDPC codes? Do self-orthogonal BCH codes give raise to self-orthogonal LDPC codes as 
well under the condition S < Smax- We show that how to derive LDPC codes from nonprimitivc BCH codes. 

One way to measure the decoding performance of linear codes is by computing their minimum distance 
dmin- The performance of low-density parity check codes under iterative decoding can also be gauged 
by measuring their stopping sets S and stopping distance s, which is the size of the smallest stopping 
set [lliO, 142]. For any given parity check matrix H of an LDPC code C, one can obtain the Tanner graph 
G of this code and computes the stopping sets. Hence, s is a property of H, while dmin is a property of C. 
The minimum distance is also bounded by dmin > s. BCH codes are decoded invertible matrices such as 
Berkcampe messay method, LDPC codes ar decoded using iterative decoding and Belief propagation (BP) 
algorithms. 

In this Chapter, we give a series of regular LDPC and Quasi-cyclic (QC)-LDPC code constructions based 
on non-primitive narrow-sense BCH codes and elements of cyclotomic cosets. The constructions are called 
Type-I and Type-II regular LDPC codes. The algebraic structures of these codes help us to predict 
additional properties of these codes. Hence, The constructed codes have the following characteristics: 

i) Two classes of regular LDPC codes are constructed that have high rates and free of cycles of length 4. 
Their properties can be analyzed easily. 

ii) The exact dimension is computed and the minimum distance is bounded for the constructed codes. 
Also, the stopping sets and stopping distance can be determined from the structure of their parity check 
matrices. They can be decoded with known standard iterative decoders. 

The motivation for our work is to construct Algebraic regular LDPC codes that can be used to derive 
quantum error-correcting codes. Alternatively, they can also be used for wireless communication chan- 
nels. Someone will argue about the performance and usefulness of the constructed regular LDPC codes 
in comparison to irregular LDPC codes. Our first motivation is to derive quantum LDPC codes based on 
nonprimitivc BCH codes. Hence, the constructed codes can be used to derive classes of symmetric quantum 
codes ['U:, ] '2'}] and asymmetric quantum codes [52, 177]. The literature lacks many constructions of algebraic 
quantum LDPC codes, see for example [129, G] and references therein. 



16.2 Constructing LDPC Codes 

Let ¥q denote a finite field of characteristic p with q elements. Recall that the set F* = Fg \ {0} of nonzero 
field elements is a multiplicative cyclic group of order q — 1. A generator of this cyclic group is called a 
primitive element of the finite field F^. 



16.2.1 Definitions 



Let n be a positive integer such that gcd{n,q) = 1 and gL™/2j <^ n < fj, = q"^ — I, where m — ord„(g) is the 
multipicative order of q modulo n. 

Let a denote a fixed primitive element of F^m . Define a map z from F*™ to F2 such that all entries of 
z(a*) are equal to except at position i, where it is equal to 1. For example, z(a^) = (0, 1, 0, . . . , 0). We call 
z(a'^) the location (or characteristic) vector of a^. We can define the location vector z(a*+-'"'"^) as the right 
cyclic shift of the location vector z{a^^^), for < j < ^ — 1, and the power is taken module /x. 



Definition 196. We can define a map A that associates to an element F*™ a circulant matrix in Fg by 



/ z(a') \ 
z(a^+i) 



\ z(a'+^-i) / 



(16.1) 



By construction, A{a'^) contains a 1 in every row and column. 
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For instance, A{a^) is the identity matrix of size /i x /i, and A{a'^) is the shift matrix 











V 1 



(16.2) 



/ 



We will use the map A to associate to a parity check matrix H 
rity check matrix H = {A{hij)) in jp^''^^*''^ xhe matrices A{hij)' 
based on some primitive elements hij as shown in Definition 196. 



{hij) in (F*m)°^ the (larger and binary) 
parity check matrix H = {A{hij)) in jp^''^^*''^ The matrices A(hij)' s are /i x /i circulant permutation matrices 



16.2.2 Regular LDPC Codes 

A low-density parity check code (or LPDC short) is a binary block code that has a parity check matrix H 
in which each row (and each column) is sparse. An LDPC code is called regular with parameters (p, A) if it 
has a sparse parity check matrix H in which each row has p nonzero entries and each column has A nonzero 
entries. 

A regular LDPC code defined by a parity check matrix H is said to satisfy the row-column condition if 
and only if any two rows (or, equivalently, any two columns) of H have at most one position of a nonzero 
entry in common. The row-column condition ensures that the Tanner graph does not have cycles of length 
4. 

A Tanner graph of a binary code with a parity check matrix H — {hij ) is a graph with vertex set V C 
that has one vertex in V for each column of H and one vertex in C for each row in H, and there is an edge 
between two vertices i and j if and only if hij ^ 0. Thus, the Tanner graph is a bipartite graph. The vertices 
in V are called the variable nodes, and the vertices in C are called the check nodes. We refer to d{vi) and 
d{cj) as the degrees of variable node Vi and check node Cj respectively. 

Two values used to measure the performance of the decoding algorithms of LDPC codes are: girth of a 
Tanner graph and stopping sets. The minimum stopping set is analogous to the minimum Hamming distance 
of linear block codes. 



Definition 197 (Grith of a Tanner graph). The girth g of the Tanner graph is the length of its shortest 
cycle (minimum cycle). 

A Tanner graph with large girth is desirable, as iterative decoding converges faster for graphs with large 
girth. 



Definition 198 (Stopping set). A stopping set 5 of a Tanner graph is a subset of the variable nodes V such 
that each vertex in the neighbors of S is connected to at least two nodes in S. 

The stopping distance is the size of the smallest stopping set. The stopping distance determines the 
number of correctable erasures by an iterative decoding algorithm, see [142, 166, 48]. 

Definition 199 (Stopping distance). The stopping distance of the parity check matrix H can be defined as 
the largest integer s(H) such that every set of at most (s(H) — 1) columns of H contains at least one row of 
weight one, see [l(i(i]. 

The stopping ratio a of the Tanner graph of a code of length n is defined by s over the code length. 

The minimum Hamming distance is a property of the code used to measure its performance for maximum- 
likelihood decoding, while the stopping distance is a property of the parity check matrix H or the Tanner 
graph G of a specific code. Hence, it varies for different choices of H for the same code C. The stopping 
distance s(H) gives a lower bound of the minimum distance of the code C defined by H, namely 

S(H) < drmn (16.3) 

It has been shown that finding the stopping sets of minimum cardinality is an NP-hard problem, since the 
minimum-set vertex covering problem can be reduced to it [n^]. 
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16.3 LDPC Codes based on BCH Codes 

In this section we give two constructions of LDPC codes derived from nonprimitivc BCH codes, and from 
elements of cyclotomic cosets. In [189], the authors derived a class of regular LDPC codes from primitive 
BCH codes but they did not prove that the construction has free of cycles of length four in the Tanner graph. 
In fact, we will show that not all primitive BCH codes can be used to construct LDPC with cycles greater 
than or equal to six in their Tanner graphs. Our construction is free of cycles of length four if the BCH codes 
are chosen with prime lengthes as proved in Lemma 202; in addition the stopping distance is computed. 
Furthermore, We are able to derive a formula for the dimension of the constructed LDPC codes as given in 
Theorem 204. We also infer the dimension and cyclotomic coset structure of the BCH codes based on our 
previous results in [IG, 13]. 

We keep the definitions of the previous section. Let q be a power of a prime and n a positive integer such 
that gcd((7,n) = 1. Recall that the cyclotomic coset modulo n is defined as 



Gx = {xq^ mod n \ i ^ 1^,1 >0\. 



(16.4) 



Let m be the multiplicative order of q modulo n. Let a be a primitive element in F^m . A nonprimitive 
narrow-sense BCH code C of designed distance 5 and length n over is a cyclic code with a generator monic 
polynomial g{x) that has a, a^, . . . , a^~^ as zeros. 



<5-l 



(16.5) 



Thus, c is a codeword in C if and only if c{a) ~ c(a^) = . . . = c{a^ ^) = 0. The parity check matrix of this 
code can be defined as 



bch 



la a 
1 a" 

1 a^'-i a2(«-i) 



a 



a 

T,2("-l) 



(16.6) 



We note the following fact about the cardinality of cyclotomic cosets. 



Lemma 200. Let n he a positive integer and q be a power of a prime, such that gcd(7i, q) = \ and gl-™/2J <; 
n ^ 9"* — 1, where m = ordn{q). The cyclotomic coset — {xq^ mod n \ < j < m} has a cardinality of 
m for all x in the range 1 < x < nq^"^^"^^ j (g™ — 1). 

Proof. See [KJ, Lemma 8]. □ 

Therefore, all cyclotomic cosets have the same size m if their range is bounded by a certain value. This 
lemma enables one to determine the dimension in closed form for BCH code of small designed distance [16, 13]. 
In fact, we show the dimension of nonprimitve BCH codes over F^. 



Theorem 201. Let q be a prime power and gcd{n,q) ~ 1, with ordn{q) = ni. Then a narrow-sense 
BCH code of length gL™/2J < „ < - 1 

over Fg with designed distance 5 in the range 2 < 5 < (5max — 
min{ [ng^^/^l /(q™ — l)Jj?i}, has dimension of 

k^n~m\{5-l){l-l/q)\. (16.7) 

Proof. See [13, Theorem 10]. □ 

Based on these two observations, we can construct regular LDPC codes from BCH codes with a known 
dimension and cyclotomic coset size. 



16.3. LDPC Codes based on BCH Codes 
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16.3.1 Type-I Construction 

In this construction, we use the parity check matrix of a nonprimitive narrow-sense BCH code over ¥q to 
define the parity check matrix of a regular LDPC over F2. 

Consider the narrow-sense BCH code of prime length qL"i/2j < n < — 1 over ¥q with designed distance 
S and ordn{q) — m. We use the fact that there must be some primes in the integer range (gL™/2J^gm _ j). 
In fact, there must exist a prime between x and 2x for some integer x, in which it ensures existence primes 
in the given interval. A parity check matrix H of an LDPC code can be obtained by applying the map A in 
Equation (16.1) to each entry of the parity check matrix (17.17) of this BCH code, 

H = (16.8) 

" A{1) A{a) A{a^) ■■■ A(a"-i) ' 

A{1) A{a^) A(a4) ... yl(a2("-i)) 

_ .4(1) A(a^-i) A(a2(*-i)) • • • A(a(*'-i)("-i))_ 

The matrix H is of size [5 — l)fi x rt/i and by construction it has the following properties: 

• Every column has a weight of (5 — 1 . 

• Every row has a weight of n. 

The matrix H of size {S — l)/i x nfi has a weight of p = 5 — 1 in every column, and a weight of A = n in 
every row. The null space of the matrix H defines a {p, A) LDPC code with a high rate for a small designed 
distance S as we will show. The minimum distance of the BCH code is bounded by 

. ^ / + 1, odd S; , , 

a,mn even S. ^ ' 

Also, the minimum distance of the LDPC codes is bounded by dmin- Now, we will show that in general 
regular (p. A) LDPC codes derived from primitive BCH codes of length n are not free of cycles of length four 
as claimed in [189]. 

Lemma 202. The Tanner graph of LDPC codes constructed in Type-I are free of cycles of length four for 
a prime length n. 

Proof. Consider the block-column indexed by n — j for 1 < j < n — 1 and let and r^ be two different 
block-rows for 1 < ri,r^ < (^ — 1). Assume by contradiction that we have A{a^'^'"~^'') = A(a''j^"~-''). Thus 
ri{n — j) mod n = r[{n — j) mod n or n{ri — r[) mod n — (ri — r[)j mod n = 0. This contradicts the 
assumption that n > j > 1 and ri ^ r[. □ 

Hence primitive BCH codes of composite length n can not be used to derive LDPC codes that are cycles- 
free of length four using our construction. 

The proof of the following lemma is straight forward by exchanging, adding, and permuting a block-row. 



Lemma 203. Let (. . . , If , . . .) he a vector of length fi that has 1 at position £. Under the cyclic shift, the 
following two blocks ha and hb of size fi x fj, are equivalent, where ha and hh are generated by the rows 
(1 ... li . . . ) and (1 ... Ij • • • ) o,Tid their cyclic shifts, respectively. 

One might imagine that the rank of the parity check matrix H in (16.10) is given by {S— l)fi since rows of 
every block-row ha is linearly independent. A computer program has been written to check the exact formula 
and then we drove a formula to give the rank of the matrix H. 

Theorem 204. Let n be a prime in the range q^"^/'^^ < n < /i = — 1 and 5 be an integer in the range 
2 < S < n for some prime power q and m — ord^(n). The rank of the parity check matrix H given by 



A" A^ A^ 
A"" A^ 



H 



(16.10) 
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is {S - l)/i - ((5 - 2), where A' = A{a'). 



Proof. The proof of this theorem can be shown by mathematical induction for 1, 2, . . . , (5 < n. We know that 
every block-row is linearly independent. 

i) Case i. Let 6 = 2, the statement is true since ever block-row has only 1 in every column, the first n 
columns represent the identity matrix. 

ii) Case ii-1. Assume the statement is true for 6 — 2. In this case, the matrix G has a full rank given by 
{6 — 2)^ — {6 — 3). So, we have 



G = 



V 



hii 


hi2 


hi3 







h23 








h33 




















\ 



HS-2)i5-2) 



h{S-2)7i I 



The elements /ij^s have I's in the diagonal and zeros everywhere using simple Gauss elimination method 
and Lemma 203. 

iii) Case iii-1. We can form the sub-matrix H2 of size (6 — l)fj, x {6 — 1)^ by adding one block-row to the 
matrix G. The last block-row is generated by 

(v4(a°), A(a*-i), ^(a2(^-i)), . . . , 

All fi—l rows of the last block-row are linearly independent and can not be generated from the previous 6— 
2 blocks-row. Now, in order to obtain the last row-block to be zero at positions h(^s-i)2, ■ ■ ■ , /i(5-i)((5-2) , 

we can add the element hjj to the element h(^s_i)j. In addition, the last row (row indexed by [6 — l)/i) 
of block-row 6 — 1 can be generated by adding all elements of the first block-row to the first /i — 1 rows 
of the last block-row. 



G = 



V 



hii 


hi2 


hi3 





1^22 


h23 








h33 




















h2n 



\ 



i(<5-l)(5-l) 



hin 



Therefore, the matrix G has rank of (6 — 2)/i — (5 — 3) + /.t — 1 = {6 — l)/i — (6 — 2). We notice that the 
matrix H has the same rank as the matrix G, hence the proof is completed. 

□ 

The proof can also be shown by dropping the last row of every block-row except at the last row in the 
first block-row. Hence, the remaining matrix has a full rank. 

Obtaining a formula for rank of the parity check matrix H allows us to compute rate of the constructed 
LDPC codes. Now, we can deduce the relationship between nonprimitivc narrow-sense BCH codes and LDPC 
codes constructed in Type-I. 



Theorem 205 (LDPC-BCH Theorem). Let n be a prime and q be a power of a prime, such that gcd(n, q) = 1 
and qL™/2j < tj < _ 1^ where m = ordn{q). A nonprimitivc narrow-sense BCH code with parameters 
[n, fc, dmm]q givcs a {6 ~ 1, n) LDPC code with rate (nfi — [{6 — l)fi ~ (6 — 2)])/nfi, where k = n — m\{6 — 
1)(1 — l/q)] and 2 < 6 < 5max- The constructed codes are free of cycles with length four. 

Proof. By Type-I construction of LDPC codes derived from nonprimitivc BCH codes using Equation (16.10), 
we know that every element a* in Hbch is a circulant matrix A{a^) in H. Therefore, there is a parity check 
matrix H with size (6 — l)/i x nfi. H has a row weight of n and a column weight of 6 — 1. Hence, the null 
space of the matrix H defines an LDPC code with the given rate using Lemma 204. 

The constructed code is free of cycles of length four, because the matrix Hbch has no two rows with the 
same value in the same column, except in the first column. Hence, the matrix H has, at most, one position 
in common between two rows due to circulant property and Lemma 202. Consequently, they have a Tanner 
graph with girth greater than or equal to six. □ 
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Based on Type-I construction of regular LDPC codes, we notice that every variable node has a degree 
S — I and every check nodes has a degree n. Also, the maximum number of columns that do not have one in 
common is n. Therefore, the following Lemma counts the stopping distance of the Tanner graph defined by 
H. 

Lemma 206. The cardinality of the smallest stopping set of the Tanner graph of Type-I construction of 
regular LDPC codes is fi + I. 

Proof. Let H be the parity check matrix of an — 1, n) LDPC code given in Type-I construction. We know 
that every row has a weight of n and every column has a weight of (5 — 1. Let Cj be a node in C and Vi be a 
node in V, therefore, d{cj) = n and d{vi) = 5 — 1. If we choose a set of the first ii columns in H, then every 
row has a weight of exactly one. Therefore, the result follows. □ 



Example 207. Let n ^ ii ^ — 1, with m = 7 and q — 2. Consider a BCH code with 5 — b and length n. 
Assume a to he a primitive element in Fgm . The matrix H can he written as 



H = 



1 


a 


a" . 


. ai26 


1 


a2 


. 


. ai25 


1 


a3 


. 


. ai24 


1 


a4 


. 


. ai23 



and the matrix H has size 508 x 16129. Therefore, we constructed a (4,127) regular LDPC with a rate of 
123/127, see Fig. 16.1. 



Table 16.1: Parameters of LDPC codes derived from NP BCH codes 
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BCH Codes 


LDPC code 
size of H 


rank of H 


2 


31 


[23,12,4] 


(93,713) 


91 


3 


26 


[23,12,5] 


(104,598) 


101 


2 


31 


[31,26,3] 


(62,961) 


61 


2 


31 


[31,21,5] 


(124,961,) 


121 


2 


31 


[31,26,6] 


(155, 961) 


151 


2 


31 


[31,16,7] 


(186,961) 


181 


2 


63 


[47, 24, 4] 


(189 ,1961) 


187 


2 


63 


[61,21,6] 


(315, 3843) 


311 


2 


63 


[61,11,10] 


(567,3843) 


559 


2 


127 


[127,113,15] 


(1778,16129) 


1765 


2 


127 


[127,103,25] 


(3048,16129) 


3025 



16.4 LDPC Codes Based on Cyclotomic Cosets 

In this section we will construct regular LDPC codes based on the structure of cyclotomic cosets. Assume 
that we use the same notation as shown in Section 16.2. Let Cx be a cyclotomic coset modulo prime integer 
n, defined as Cx = {xq^ mod n \ i & 1^,1 < x < n}. We can also define the location vector y of a cyclotomic 
coset Cx, instead of the location vector z of an element a*. 

Definition 208. The location vector y{Cx) defined over a cyclotomic coset Cx is the vector y(Cx) = 
(zq, zi, . . . , Zn), where all positions are zeros except at positions corresponding to elements of Cx. 

Let t be the number of different cyclotomic cosets C^'s that are used to construct the matrices H^^^s. 
We can index the i location vectors corresponding to Cxi,Cx2, ■ ■ ■ ,Cxi, as y^, y'^, . . . , y^. Let y^{jCx) be 
the cyclic shift of y^(Cx) where every element in Cx is incremented by 1. 
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16.4.1 Type-II Construction 



We construct the matrix i/^ 



from the cyclotomic Cx as 



y\iCx 



(16.12) 



^ y\r-^Gx) I 



where y^i'^-'^^Cx) is the cyclic shift of y^{'^^Cx) for < j < n — 1. 

From Lemma 200, we know that all cyclotomic cosets C^^'s have a size of TO if 1 < X < TigTWal /(^m _ i). 

We can generate all rows of -ffc^, by shifting the first row one position to the right. Our construction of 
the matrix has the following restrictions. 

• Let X < 0(-\/n), this will guarantee that all cyclotomic cosets have the same size m. 

• Any two rows of H^^ have only one nonzero position in common. 

• Every row (column) in H^^ has a weight of m. 

We can construct the matrix H from different cyclotomic cosets as follows. 



H 



Hk 



C3 



(16.13) 



/ y\Ci) 
yHiCi) 



y\C2) 
y\iC2) 



\ y'(7""'Ci) y^(7"-'C72) 



y'ij-'c,) ) 



where we choose the number i of different sub-matrices ■ The n x (£ * n) matrix H constructed in 
Type-II has the following properties. 

i) Every column has a weight of to and every row has a weight of m * £, where I is the number of matrices 

ii) For a large n, the matrix H is a sparse low-density parity check matrix. 

We can also show that the null space of the matrix H defines an (to,to^) LDPC code with rate {^ — 
Clearly, an increase in i, increases the rate of the code. 

Since all cyclotomic cosets Cx^ , Cx2, ■ ■ ■ , Cxg used to construct H are different, then the first column in 
each sub-matrix is different from the first column in all sub-matrices for j ^ i and 1 < i < £. Now, 
we can give a lower bound in the stopping distance of Type-II LDPC codes. 



Lemma 209. The stopping distance of LDPC codes, that are in Type-II construction, is at least £+1. 

One can improve this bound, by counting the number of columns in each sub-matrix that do not 
have one in common in addition to all columns in the other sub-matrices. 

Example 210. Consider n = g™ — 1 with m — b, q — 2, and (5 = 5. We can compute the cyclotomic cosets 
Ci, C3 andCz as Ci = {1,2,4,8,16}, C3 = {3,6,12,24, 17} anrf C5 = {5, 10, 20, 9, 18}. The matrices H}.^, 
H^^ and H^^ can be defined based on Ci, C3 and C5, respectively. 

/IIOI 0001 0000 0001 0000 0000 0000 000\ 

0110 1000 1000 0000 1000 0000 0000 000 

0011 0100 0100 0000 0100 0000 0000 000 

0001 1010 0010 0000 0010 0000 0000 000 

0000 1101 0001 0000 0001 0000 0000 000 



0100 0100 0000 0100 0000 0000 0000 oil 

Vioio 0010 0000 0010 0000 0000 0000 001/ 



(16.14) 



The matrix H of size (31,93) is given by 



H 



Hk 



Hk 



(16.15) 



therefore, the null space of H defines an (5,15) LDPC code with parameters (62,93), see Fig. ??. 



16.6. Conclusion 
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We note that Type-I and Type-II constructions can be used to derive quantum codes, if the parity 
check matrix H is modified to be self-orthogonal. Recall that quantum error-correcting codes over can 
be constructed from self-orthogonal classical codes over ¥q and F^2, see for example [I '!, -U, 84, 129] and 
references therein. In our future research, we plan to derive quantum LDPC codes from Type-I and Type-II 
constructions that are based on nonprimitve BCH codes. 

16.5 Simulation Results 

We simulated the performance of the constructed codes using standard iterative decoding algorithms. Fig. 16.1 
shows the BER curve for an (4,31) LDPC code Type I with a length of 961, dimension of 837, and number 
of iterations of 50. This performance can also be improved for various lengths and the designed distance 
of BCH codes. Fig. ?? shows the BER curve for a (5,15) LDPC Type II code with a size of (62,93) and 
number of iterations 30. The performance of these constructed codes can be improved for large code length 
in comparison to other LDPC codes constructed in [126, 127]. As shown in Fig. IC.l at the 10^"* BER, the 
code performs at 5.5 Eb/No{dB), which is 1.7 units from the Shannon limit. Also, in Fig.?? at the BER of 
10"'', the code performs at 5.3 Eb/No{dB). 

Bit Error Rale of LDPC 



10"^ 



10"* 









e 4,31)-LDPC from BCH code witfi size (124,961) 






e (4,23)-LDPC from BCH code with size (1 24,71 3) 






e (5,61)-LDPC from BCH code with size (315,3843) 









Eb/No (dB) 

Figure 16.1: Type I: Performance of an (4,31) LDPC code with rate 27/31 and code size (837,961). 



16.6 Conclusion 

We introduced two families of regular LDPC codes based on nonprimitive narrow-sense BCH codes and 
structures of cyclotomic cosets. We gave a systematic method to writ every element in parity check matrix of 
BCH codes as vector of length /i. We demonstrated that these constructed codes have high rates and a uniform 
structure that made it easy to compute their dimensions, stopping distance, and bound their minimum 
distance. Furthermore, one can use standard iterative decoding algorithms to decode these codes, we plan 
to investigate more properties of these codes and evaluate their performance over different communication 
channels. One can easily derive irregular LDPC codes based on these codes and possibly increase performance 
of the iterative coding. Also, in a future research, these constructed codes can be used to derive quantum 
LDPC error-correcting codes. 



Part V 

Applications 
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CHAPTER 17 



Asymmetric Quantum BCH Codes 



Summary: Recently, the theory of quantum error control codes has been extended to include quantum 
codes over asymmetric quantum channels — qubit-flip and phase-shift errors may have equal or different 
probabilities. Previous work in constructing quantum error control codes has focused on code constructions 
for symmetric quantum channels. In this chapter we establish a method to construct asymmetric quantum 
codes based on classical codes. We derive families of asymmetric quantum codes derived, once again, from 
classical BCH and RS codes over finite fields. Particularly, we present interesting asymmetric quantum codes 
based on BCH codes with parameters [[n, k, dz/dx]\q for certain values of code lengths, dimensions, and 
various minimum distance. Finally, our constructions are well explained by an illustrative example. 

17.1 Introduction 

In 1996, Andrew Steane stated in his seminal work [ , page 2, col. 2] [176, 179] "The notation {n, K, di, 1^2} 
is here introduced to identify a 'quantum code, ' meaning a code by which n quantum bits can store K bits 
of quantum information and allow correction of up to \_{di — 1)/2J amplitude errors, and simultaneously up 
to [((^2 — 1)/2J phase errors." This work is motivated by this statement, in which we construct efhcient 
quantum codes that correct amplitude (qubit-flip) errors and phase-shift errors separately. In [l-JO], it was 
said that "BCH codes are among the powerful codes". We address constructions of quantum codes based 
on Bose-Chaudhuri-Hocquenghem (BCH) codes over finite fields for quantum symmetric and asymmetric 
channels. 

Many quantum error control codes (QEC) have been constructed over the last decade to protect quantum 
information against noise and decoherence. In coding theory, researchers have focused on bounds and the 
construction aspects of quantum codes for large and asymptomatic code lengths. On the other hand, physi- 
cists intend to study the physical realization and mechanical quantum operations of these codes for short code 
lengths. As a result, various approaches to protect quantum information against noise and decoherence are 
proposed including stabilizer block codes, quantum convolutional codes, entangled-assisted quantum error 
control codes, decoherence free subspaces, nonadditive codes, and subsystem codes [21, 34, 59, 70, 1-52, 125, 
150, 90, 192] and references therein. 

Asymmetric quantum control codes (AQEC), in which quantum errors have different probabilities — 
Pt Z > Pr A", are more efficient than the symmetric quantum error control codes (QEC), in which quantum 
errors have equal probabilities — Pr Z = Pr A. It is argued in [n!)] that dcphasing (loss of phase coherence, 
phase-shifting) will happen more frequently than relaxation (exchange of energy with the environment, qubit- 
flipping). The noise level in a qubit is specified by the relaxation Ti and dcphasing time T2] furthermore the 
relation between these two values is given by 1/Ti = l/(2ri) -I- Tp; this has been well explained by physicists 
in [52, 89, 181]. The ratio between the probabilities of qubit-flip X and phase-shift Z is typically p w 2T1/T2. 
The interpretation is that Ti is much larger than T2, meaning the photons take much more time to flip from the 
ground state to the excited state. However, they change rapidly from one excited state to another. Motivated 
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by this, one needs to design quantum codes that are suitable for this physical phenomena. The 

fauh tolerant operations of a quantum computer carrying controlled and measured quantum information over 
asymmetric channel have been investigated in [3, 23, 24, 180, 181, 1] and references therein. Fault-tolerant 
operations of QEC are investigated for example in [2, 1, 70, 151, 169, 180, 104] and references therein. 

Subsystem codes (SSC) as we prefer to call them were mentioned in the unpublished work by Knill [105, 
103], in which he attempted to generalize the theory of quantum error-correcting codes into subsystem 
codes. Such codes with their stabilizer formalism were reintroduced recently [14, 23, 24, 102, 112, 149]. The 
construction aspects of these codes are given in [11, 10, 14]. Here we expand our understanding and introduce 
asymmetric subsystem codes (ASSC). 

Our following theorem establishes the connection between two classical codes and QEC, AQEC, SCC, 



Theorem 211 (CSS AQEC and ASSC). Let Ci and C2 be two classical codes with parameters [n, fci, di]q and 
[n,k2,d2]q respectively, and dx = min { wt(Ci\C^), wt(C2\Ci'^)}, and dz = max { wt(Ci\C^), wt(C2\C]^)} . 

i) ifC^ Q Ci, then there exists an AQEC with parameters [[n,dimCi — dimC^, wt(C2\C]^)/ wt(Ci\C^)]]g 
that is [[n, ki + k2 — n, dz/dx]\q- Also, there exists a QEC with parameters [[n, fci + fc2 — n, d^Wq- 

ii) From [i], there exists an SSC with parameters [[n, ki + k2 — n — r,r, dx]]q for < r < fci + /c2 — n. 

Hi) If C2 = Ci n Ci C C2, then there exists an ASSC with parameters [[n, fc2 — fci, fci + fc2 — f^, dz/dx\\q and 

[[n, fci + fc2 - n, fc2 - ki,dz/dx\]q. 
Furthermore, all constructed codes are pure to their minimum distances. 

The codes derived in [13, 16] for primitive and nonprimitive quantum BCH codes assume that qubit-flip 
errors, phase-shift errors, and their combination occur with equal probability, where PrZ = PrAT = PrY = 
J3/3, Pr / = 1 — p, and {X, Z, Y, 1} are the binary Pauli operators P shown in Section 17.2, see [34, 168]. We 
aim to generalize these codes over asymmetric quantum channels. In this work we give families of asymmetric 
quantum error control codes (AQEC's) motivated by the work from [52, 89, 181]. Assume we have a classical 
good error control code Ci with parameters [[n, ki, di]]q for i g {1, 2} — codes with high minimum distances 
di and high rates ki/n. We can construct a quantum code based on these two classical codes, in which Ci 
controls the qubit-flip errors while C2 takes care of the phase-shift errors, see Lemma 224. 

A well-known construction on the theory of quantum error control codes is called CSS constructions. The 
codes [[5, 1, 3]]2, [[7, 1, 3]]2, [[9, 1, 3]]2, and [[9, 1,4, 3]]2 have been investigated in several research papers that 
analyzed their stabilizer structure, circuits, and fault tolerant quantum computing operations. On this work, 
we present several AQEC codes, including a [[15, 3, 5/3]]2 code, which encodes three logical qubits into 15 
physical qubits, detects 2 qubit-flip and 4 phase-shift errors, respectively. As a result, many of the quantum 
constructed codes and families of QEC for large lengths need further investigations. We believe that their 
generalization is a direct consequence. 

17.2 Asymmetric Quantum Codes 

In this section we shall give some primary definitions and introduce AQEC constructions. Consider a quantum 
system with two-dimensional state space C^. The basis vectors 



can be used to represent the classical bits and 1 . It is customary in quantum information processing to use 
Dirac's ket notation for the basis vectors; namely, the vector vq is denoted by the ket |0) and the vector vi is 
denoted by ket |1). Any possible state of a two-dimensional quantum system is given by a linear combination 
of the form 



ASSC. 




(17.1) 




(17.2) 



In quantum information processing, the operations manipulating quantum bits follow the rules of quantum 
mechanics, that is, an operation that is not a measurement must be realized by a unitary operator. For 
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example, a quantum bit can be flipped by a quantum NOT gate X that transfers the qubits |0) and |1) to 
|1) and |0), respectively. Thus, this operation acts on a general quantum state as fohows. 

X{a\0)+b\l)) = a|l> +6|0) . 

With respect to the computational basis, the quantum NOT gate X represents the qubit-flip errors. 

X = |0)(1| + |1)(0|= I ly (17.3) 

Also, let Z = ^ Q '^^i^ ^ be a matrix represents the quantum phase-shift errors that changes the phase 
of a quantum system (states) . 

Z{a\0)+b\l)) = a\0)-b\l). (17.4) 

Other popular operations include the combined bit and phase-flip Y — iZX, and the Hadamard gate H, 
which are represented with respect to the computational basis by the matrices 

Connection to Classical Binary Codes. Let Hi and Gi be the parity check and generator matrices of 
a classical code Ci with parameters [n,ki,di]2 for i g {1,2}. The commutativity condition of Hi and H2 is 
stated as 



Hi.H^ + H2.H^ = 0. (17.6) 
The stabilizer of a quantum code based on the parity check matrices Hi and H2 is given by 

Hstab= [Hi\H2). (17.7) 

One of these two classical codes controls the phase-shift errors, while the other codes controls the bit-flip 
errors. Hence the CSS construction of a binary AQEC can be stated as follows. Hence the codes Ci and C2 
are mapped to H^ and H^, respectively. 

Definition 212. Given two classical binary codes Ci and C2 such that C2 C Ci. If we form G = 

Hi.H^ - H2.H^ = (17.8) 

Let di = wt(Ci\C2) and d2 = ■wt{C2\G^), such that d2 > di and ki+k2 > n. If we assume that Ci corrects 
the qubit-flip errors and C2 corrects the phase-shift errors, then there exists AQEC with parameters 

[[n,ki+k2-n,d2/di]]2. (17.9) 

We can always change the rules of Ci and C2 to adjust the parameters. 

17.2.1 Higher Fields and Total Error Groups 

We can briefly discuss the theory in terms of higher flnite flelds Fg. Let Ti be the Hilbert space = C = 
C (E) C"^ (E) ... (g) C*. Let I a;) be the vectors of orthonornial basis of where the labels x are elements in the 
finite field F^. Let a,b £ Fg, the unitary operators X{a) and Z{b) in are stated as: 



X{a) \x) ^\x + a), Z{b) \x) = w*^^^^' |a;) , 



(17.10) 
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where w = exp(27ri/p) is a primitive pth root of unity and tr is the trace operation from to Fp 
Let a = (oi, . . . , a„) G F^' and b = {bi, . . . , 6„) G F^. Let us denote by 

X{a.) ^ X(ai) (g) • • • X(a„) and, 

Z(b) = «) • • • (g) Z(6„) (17.11) 

the tensor products of n error operators. The sets 

n 

E, = {X(a) =(g)X(a,) I aeF^,a, gFJ, 
1=1 

n 

E, = {Z(b)=(g)Z(6,) |beF;\6, gFJ 

i=l 

form an error basis on . We can define the error group G^. and G^ as foUows 

G, = {uj^E, - c^"X(a) I a e F^, c e Fp}, 
G, = {iu'E, = c^^Z(b) I b e F;\ c e Fp}. (17.13) 

Hence the total error group 

G = {g,,g4 

71 71 

= {uj^l^X{a,),uj'I^Z{b,)\a„b,e¥g'j (17.14) 

i=l 1=1 

Let us assume that the sets G^ and Gz represent the qubit-flip and phase-shift errors, respectively. 

Many constructed quantum codes assume that the quantum errors resulted from decoherence and noise 
have equal probabilities, Pr X — Pi Z. This statement as shown by experimental physics is not true [181, 89]. 
This means the qubit-flip and phase-shift errors happen with different probabilities. Therefore, it is needed 
to construct quantum codes that deal with the realistic quantum noise. We derive families of asymmetric 
quantum error control codes that differentiate between these two kinds of errors, Pr Z > PrX. 

Definition 213 (AQEC). A q-ary asymmetric quantum code Q, denoted by [[n,k,dz/dx]]q, is a q'' dimen- 
sional subspace of the Hilbert space C^" and can control all bit-flip errors up to [^^^J and all phase-flip 
errors up to [ '^-~"'" J . The code Q detects (di — 1) qubit-flip errors as well as detects {di — 1) phase-shift errors. 

We use different notation from the one given in [-52]. The reason is that we would like to compare dz 
and dx as a factor p = dz/dx not as a ratio. Therefore, if dz > d^, then the AQEC has a factor great than 
one. Hence, the phase-shift errors affect the quantum system more than qubit-flip errors do. In our work, 
we would like to increase both the factor p and dimension k of the quantum code. 

Connection to Classical nonbinary Codes. Let Ci and C2 be two linear codes over the finite field F^, 
and let [n, ki, di]q and [n, fc2, d2]q be their parameters. For i € {1, 2}, if Hi is the parity check matrix of the 
code Ci, then dimC,^ = n — hi and rank of H^^ is ki. If C^^ C Ci+j; mod 2)1 then C:^^^- 2) ^ ^i- 
the rows of Hi which form a basis for can be extended to form a basis for Ci+^i mod 2) by adding some 
vectors. Also, if gi{x) is the generator polynomial of a cyclic code Ci then ki = n — deg{gi{x)), see [130, 88]. 

The error groups Gx and Gz can be mapped, respectively, to two classical codes Ci and C2 in a similar 
manner as in QEC. This connection is well-know, see for example [34, 152, 163]. Let d be a classical code 
such that C^^i^^ ^^^^ 2) ^ for i G {1,2}, then we have a symmetric quantum control code (AQEC) with 
parameters [[n, ki + k2 — n, dz/dx]\q- This can be illustrated in the following result. 

Lemma 214 (CSS AQEC). Let Ci be a classical code with parameters [n, ki, di]q such that C^ C Ci_|_(i mod 2) 
for i e {1,2} , and dx = min { wt(Ci\C2-^), wt(C2\Cf )}, and dz = max { wt(Ci\C2-^), wt(C2\Cf )} . Then 
there is asymmetric quantum code with parameters [[n,ki + k2 — n,dz/dx]]q. The quantum code is pure to 
its minimum distance meaning that i/wt(Ci) = wt(Ci\C;^) then the code is pure to dx, also i/wt(C2) = 
wt{C2\C^) then the code is pure to dz- 



(17.12) 
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Figure 17.1: Constructions of asymmetric quantum codes based on two classical codes Ci and C2 
with parameters [n, fci] and [71,^2] such that Ci C Ci_|_(i ,„od 2) ioi i = {1,2}. AQEC has parameters 
[[n, fci + fc2 — n,dz/dx]]q where dx = wt(Ci\C^) and dz = wt{C2\Ci) 



Therefore, it is straightforward to derive asymmetric quantum control codes from two classical codes as 
shown in Lemma 224. Of course, one wishes to increase the values of dz vers, dx for the same code length 
and dimension. 

Remark 215. The notations of purity and impurity of AQEC remain the same as shown for QEC, the 
interested reader might consider any primary papers on QEC. 



17.3 Asymmetric Quantum BCH and RS Codes 

In this section we derive classes of AQEC based on classical BCH and RS codes. We will restrict ourself to the 
Euclidean construction for codes defined over F^. However, the generalization to the Hermitian construction 
for codes defined over F^2 is straight forward. We keep the definitions of BCH codes to a minimal since they 
have been well-known, see example [LS] or any textbook on classical coding theory [130, 88]. Let g be a power 
of a prime and n a positive integer such that gcd{q, n) — \. Recall that the cyclotomic coset Sx modulo n is 
defined as 



Sx — {xq^ mod n | i G Z, i > 0}. 



(17.15) 



Let m be the multiplicative order of q modulo n. Let a be a primitive element in ¥qm . A nonprimitive 
narrow-sense BCH code C of designed distance 5 and length n over is a cyclic code with a generator monic 
polynomial g{x) that has a, a^, . . . , a^~^ as zeros. 



<5-l 



gix) = Y[{x-a^). 



(17.16) 



Thus, c is a codeword in C if and only if c{a) = c(a^) 
code can be defined as 



H, 



bch 



1 a 

1 a2 



1 



,.-5-1 



a 



v2(«-l) 



c{a ) = 0. The parity check matrix of this 



a2("-i) 



(5-l)(„-l) 



(17.17) 



In general the dimensions and minimum distances of BCH codes are not known. However, lower bounds 
on these two parameters for such codes are given hy d > S and k > n — m{5 — 1). Fortunately, in [13, IG] 
exact formulas for the dimensions and minimum distances are given under certain conditions. The following 
result shows the dimension of BCH codes. 



Theorem 216 (Dimension BCH Codes). Let q he a prime power and gcd(n, g) = 1, with ordn{q) = rn. 
Then a narrow-sense BCH code of length (jL'"/2J < n < q"" - 1 over Fg with designed distance S in the range 
2 < 6 < (5niax — min{ [ngl^™/^^ /(q™ — 1)J j ^o-' dimension of 



k = n-m[((5- 1)(1- 1/g)]. 



(17.18) 
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Proo/. See [ I Theorem 10]. □ 

Steane first derived binary quantum BCH codes in [177, 179]. In addition Grassl el. at. gave a family of 
quantum BCH codes along with tables of best codes [7( ] . 

In [IG, 13], while it was a challenging task to derive self-orthogonal or dual-containing conditions for BCH 
codes, we can relax and omit these conditions by looking for BCH codes that are nested. The following result 
shows a family of QEC derived from nonprimitive narrow-sense BCH codes. 

We can also switch between the code and its dual to construct a quantum code. When the BCH codes 
contain their duals, then we can derive the following codes. 

Theorem 217. Let m = ord„(g) and qL»"/2j < 77, < _ 1 where q is a power of a prime and 2 < 6 < 5max, 
with 

'5*.ax = ^^(9^"^'^ -l-{q-2)[m odd]), 
then there exists a quantum code with parameters 

[[n,n-2m\{S-l)il-l/q)],>6]]g 

pure to (5max + 1 

Proof. See [ i-H, Theorem 19]. □ 



17.3.1 AQEC-BCH 

Fortunately, the mathematical structure of BCH codes always us easily to show the nested required structure 
as needed in Lemma 224. We know that g{x) is a generator polynomial of a narrow sense BCH code that 
has roots a^, a'^, . . . , a^~^ over Wq. We know that the generator polynomial has degree m[{S — 1)(1 — l/5)\ 
if 6 < dmax- Therefore the dimension is given by fc = n — deg{g{x)). Hence, the nested structure of BCH 
codes is obvious and can be described as follows. Let 

S,+i >5,> S^-i > . . . > 2, (17.19) 

and let Ci be a BCH code that has generator polynomial gi{x), in which it has roots {2, 3, ... ,6 — 1}. So, Ci 
has parameters [n, n — deg{gi(x)), di > Si]q, then 

Q+i C C Q_i C . . . (17.20) 

We need to ensure that 6i and 6i+i away of each other, so the elements (roots) {2, . . . ,Si — 1} and 
{2, . . . , Si+i — 1} are different. This means that the cyclotomic cosets generated by Si and J^+i are not the 
same, 5*1 U ... U Ss^-i 7^ 5i U . . . U Ssi_^_i^i. Let 5,^ be the designed distance of the code C^. Then the 
following result gives a family of AQEC BCH codes over F^. 

Theorem 218 (AQEC-BCH). Let q be a prime power and gcd(n, q) — 1, with ordn{q) — m. Let Ci and C2 

be two narrow-sense BCH codes of length gL™/2J < „ < - 1 over ¥q with designed distances di and S2 in 
the range 2 < Si,52 < 5max = min{ [ng^Wzl /(^m _ and Si < < 62 < S^- 

Assume 5i U . . . U Ss^^-i 7^ 5i U . . . U 5*52-1, then there exists an asymmetric quantum error control code 
with parameters [[n, n — m\{Si — 1)(1 — l/q)~\ — m\{62 — 1)(1 — l/<z)l , ^ dz/dx]]q, where dz = wt{C2\C^) > 
62 > d^ =wt{Ci\C^) > Si. 

Proof. From the nested structure of BCH codes, we know that if Si < S2, then C Ci, similarly if 
^2 < S^, then C C2. By Lemma 216, using the fact that S < (Jmax, the dimension of the code Ci is given 
hy k, = n- m\{S, - 1)(1 - 1/g)] for i = {1, 2}. Since 5i U . . . U Ss,-i ^ SiU ...U Ss.,-i, this means that 
deg{gi{x)) < deg{g2{x)), hence fc2 < ki. Furthermore k^ < /c^. 

By Lemma 224 and we assume d^ — wt{Ci\C^) > Si and d^ = wt{C2\C^) > S2 such that d^ > dx 
otherwise we exchange the rules of dz and d^l or the code Ci with Ci^^i mod 2)- Therefore, there exists 
AQEC with parameters [[n, ki + k2 — n,> dz/dz]]q. □ 
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Table 17.1: Families of asymmetric quantum BCH codes [31] 



q 


Ci BCH Code 


C2 BCH Code 


AQEC 


2 


[15, 11,3] 


[15,7,5] 


[[15,3,5/3]]2 


2 


[15,8,4] 


[15,7,5] 


[[15,0,5/4]]2 


2 


[31,21,5] 


[31,16,7] 


[[31,6,7/5]]2 


2 


[31,26,3] 


[31,16,7] 


[[31,11,7/3]] 


2 


[31,26,3] 


[31,16,7] 


[[31,10,8/3]] 


2 


[31,26,3] 


[31,11,11] 


[[31,6,11/3]] 


2 


[31,26,3] 


[31,6,15] 


[[31,1,15/3]] 


2 


[127,113,5] 


[127, 78,15] 


[[127,64,15/5]] 


2 


[127,106,7] 


[127, 77,27] 


[[127,56,25/7]] 



The problem with BCH codes is that we have lower bounds on their minimum distance given their 
arbitrary designed distance. We argue that their minimum distance meets with their designed distance for 
small values that are particularly interesting to us. One can also use the condition shown in [13, Corollary 
11.] to ensure that the minimum distance meets the designed distance. 

The condition regarding the designed distances 5i and S2 allows us to give formulas for the dimensions of 
BCH codes Ci and C2, however, we can derive AQEC-BCH without this condition as shown in the following 
result. This is explained by an example in the next section. 

Lemma 219. Letq be a prime power, gcd{m,q) = 1, andgL^/sj < 77, < q"^ — I for some integers m = ordn{q). 
Let C'l and C'2 be two BCH codes with parameters [n,ki,dx > Si]q and [n,k2,dz > 62]q, respectively, such 
that 5i < (5^ < (52 < , and fci + ^2 > n. Assume 5*1 U ... U Ssi-i 7^ 5*1 U ... U Ss2-i, then there exists an 
asymmetric quantum error control code with parameters [[n, fci + /c2 — n, > dz/dx]]q, where dz — wt(Ci\C^) = 
62 > dx =wt{C2\Ct) =di. 

In fact the previous theorem can be used to derive any asymmetric cyclic quantum control codes. Also, 
one can construct AQEC based on codes that are defined over ¥q2 . 



17.3.2 RS Codes 



We can also derive a family of asymmetric quantum control codes based on Redd-Solomon codes. Recall 
that a RS code with length n = q ~ I and designed distance S over a finite field ¥q is a code with parameters 
[[n, n — d + I, d = 6]\q and generator polynomial 

g{x)^l[{x-a^). (17.21) 

2=1 

It is much easier to derive conditions for AQEC derived from RS as shown in the following theorem. 

Theorem 220. Let q be a prime power and n = q — 1. Let Ci and C'2 be two RS codes with parameters 
[n, n — di + 1, di]]q and [n, n — c?2 + 1, d2]q for di < d2 < di = n — di . Then there exists AQEC code with 
parameters [[n,n ~ di — di + 2,dz/dx]]q, where dx — di < dz = d2. 

Proof, since di < d2 < d^ , then n — d^+lKn — d2 + ^<n — di + \ and < k2 < ki. Hence C Ci 
and Ci C C2. Let dz = wt{C2\C^) = d2 and dx = wt(Ci\C^) = di. Therefore there must exist AQEC 
with parameters [[n, n — di — di + 2, dz/dx]]q- □ 

It is obvious from this theorem that the constructed code is a pure code to its minimum distances. One 
can also derive asymmetric quantum RS codes based on RS codes over F^2 . Also, generalized RS codes can 
be used to derive similar results. In fact, one can derive AQEC from any two classical cyclic codes obeying 
the pair- nested structure over ¥q. 
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17.4 Illustrative Example 

We have demonstrated a family of asymmetric quantum codes with arbitrary length, dimension, and minimum 
distance parameters. We will present a simple example to explain our construction. 

Consider a BCH code Ci with parameters [15, 11, 3] 2 that has designed distance 3 and generator matrix 
given by 
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(17.22) 



and the code has parameters [15,4, 8)2 and generator matrix 



1 











1 








1 


1 





1 





1 


1 


1 





1 








1 


1 





1 





1 


1 


1 


1 














1 








1 


1 





1 





1 


1 


1 


1 














1 








1 


1 





1 





1 


1 


1 


1 



(17.23) 



Consider a BCH code C2 with parameters [15,7, 5]2 that has designed distance 5 and generator matrix 
given by 
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and the code has parameters [15,8,4]2 and generator matrix 
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AQEC. We can consider the code Ci corrects the bit-flip errors such that C2 C Ci. Furthermore, C C2. 
Furthermore and dx ~ wt(Ci\C^) ~ 3 and dz ~ wt{C2\C^) = 5. Hence, the quantum code can detect 
four phase-shift errors and two bit-flip errors, in other words, the code can correct two phase-shift errors 
and one bit-flip errors. There must exist asymmetric quantum error control codes (AQEC) with parameters 
[[n, /ci + k2 — n,dz/dx]\2 = [[15, 3, 5/3]]2. We ensure that this quantum code encodes three qubits into 15 
qubits, and it might also be easy to design a fault tolerant circuit for this code similar to [[9, 1, 3]]2 or [[7, 1, 3]]2, 
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but one can use the cyclotomic structure of this code. We ensure that many other quantum BCH can be 
constructed using the approach given in this work that may or may not have better fault tolerant operations 
and better threshold values. 

Remark 221. An [7,3,4]2 BCH code is used to derive Steane's code [[7, 1, 4/3]]2- AQEC might not be 
interesting for Steane's code because it can only detect 3 shift-errors and 2 bit-flip errors, furthermore, the 
code corrects one bit- flip and one phase-shift at most. Therefore, one needs to design AQEC with d^ much 
larger than dx- 

One might argue on how to choose the distances d^ and d^, we think the answer comes from the physical 
system point of view. The time needed to phase-shift errors is much less that the time needed for qubit-flip 
errors, hence depending on the factor between them, one can design AQEC with factor a d^/d^. 

17.5 Conclusion and Discussion 

This chapter introduces a new theory of asymmetric quantum codes. It establishes a link between asymmetric 
and symmetric quantum control codes. Families of AQEC are derived based on RS and BCH codes over 
finite fields. Tables of AQEC-BCH and CSS-BCH are shown over F,. 

We pose it as open quantum to study the fault tolerance operations of the constructed quantum BCH 
codes in this work. Some BCH codes are turned out to be also LDPC codes. Therefore, one can use the 
same method shown in [ ] to construct asymmetric quantmn LDPC codes. 



CHAPTER 18 



Asymmetric Quantum Cyclic Codes 



Recently in quantum information processing, it has been shown that phase-shift errors occur with high probabihty than qubit-flip 
errors, hence phase-shift errors are more disturbing to quantum information than qubit-flip errors. This leads to constructing asymmetric 
quantum codes to protect quantum information over asymmetric channels, Pr Z > PrX. In this chapter we present two generic methods 
to derive asymmetric quantum cyclic codes using the generator polynomials and defining sets of classical cyclic codes. Consequently, 
the methods allow us to construct several families of asymmetric quantum BCH, RS, and RM codes. Finally, the methods are used to 
construct families of subsystem codes. 

18.1 Introduction 

Recently, the theory of quantum error-correcting codes is extended to include construction of such codes over asymmetric quantum 
channels — qubit-flip and phase-shift errors may have equal or different probabilities, Pr Z > PrX. Asymmetric quantum error control 
codes (AQEC) are quantum codes deflned over biased quantum channels. Construction of such codes first appeared in [52, 89, 181]. 
In [.] two families of AQEC are derived based on classical BCH and RS codes. The code construction of AQEC is the CSS construction 
of QEC based on two classical cyclic codes. For more details on the CSS constructions of QEC see for example [168, 20, 177, 176, 178, 34] 
There have been several attempts to characterize the noise error model in quantum information [I l^]. In [177] the CSS construction 
of a quantum code that corrects the errors separated was stated. However, the percentage between the qubit-flip and phase-shift error 
probabilities was not known for certain physical realization. Recently, quantum error correction has been extended over amplitude- 
damping channels [5ii]. 

We expand the construction of quantum error correction by designing stabilizer codes that can correct phase-flip and qubit-flip 
errors separately. Assume that the quantum noise operators occur independently and with different probabilities in quantum states. 
Our goal is to adapt the constructed quantum codes to more realistic noise models based on physical phenomena. 

Motivated by their classical counterparts, the asymmetric quantum cyclic codes that we derive have online simple encoding and 
decoding circuits that can be implemented using shift-registers with feedback connections. Also, their algebraic structure makes it easy 
to derive their code parameters. Furthermore, their stabilizer can be deflned easily using generator polynomials of classical cyclic codes, 
in addition, it is simple to derive self-orthogonal nested-code conditions for these cyclic classes of codes. 

In this work we construct quantum error-correcting codes that correct quantum errors that may destroy quantum information with 
different probabilities. We derive two generic framework methods that can be applied to any classical cyclic codes in order to derive 
asymmetric quantum cyclic codes. Special cases of our construction are shown in [7, SH], 

Notation: Let q be a power of a prime integer p. We denote by Fg the flnite fleld with q elements. We deflne the Euclidean inner 
product {x\y) — Y27=i ^iVi Euclidean dual of a code C C IF^ as 

- {a; G I {x\y) ^ for all y G C}. 

We also deflne the Hermitian inner product for vectors x^y in F^2 {x\y)h — Y2i^=i ^IVi ^i^d the Hcrmitian dual of C C F^2 

C-^h ={xe ¥'^2 I {x\y)h = for all y e C} . 

An [n, k, d]q denotes a classieal code C with with length n, dimension and minimum distance d over Fg. A quantum eode Q is denoted 
by [[ru k, d]]g. 



18.2 Classical Cyclic Codes 

Cyclic codes are of greater interest because they have efficient encoding and decoding algorithms. In addition, they have well-studied 
algebraic structure. Let n be a positive integer and Fg be a flnite fleld with q elements. A cyclic code C is a principle ideal of 

- ¥g[x]/{x'' - 1), 
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where Fg[a:] is the ring of polynomials in invariant x. Every cyclic code C is generated by either a generator polynomial g{x) or 
generator matrix G. Furthermore, every cyclic code is a linear code that has dimension k — n — deg{g{x)). Let c{x) be a codeword in 
Fg [a:] then c{x) — m{x)g{x), where m{x) is the message to be encoded. Consequently, every codeword can be written uniquely using a 
polynomial in Fg[a:]. Also, a codeword c in C can be written as (cq, ci , . . . , c,^- 1) G F^. A codeword c{x) G F^ [a;] is in C with defining 
set T if and only if c(q*) — for all i G T. Every cyclic code generated by a generator polynomial g{x) has a parity check polynomial 
x^ h(l / x) / h{0) where h{x) — {x^ — l)/g{x). Clearly, the parity check polynomial h{x) can be used to define the dual code such 
that g{x)h{x) mod {x'^ — 1) ^ 0. Recall that the dual cyclic code is defined by the generator polynomial g~^ (x) — x^ h{x~^) / h{Q). 
Let a be an element in Fg. Then sometimes, the code is defined by the roots of the generator polynomial g{x). Let T be the set of roots 
of g{x), T is the defining set of C, then 

The set T is the union of cyclotomic cosets modulo n that has as a root. More details in cyclic codes can be found in [88, 130]. The 
following Lemma is needed to derive cyclic AQEC. 

Lemma 222. Let d be cyclic codes of length n over Fg with defining set Ti for i — 1,2. Then 
i) Ci n C2 has defining set T\ U T2 . 
a) Ci + C2 has defining set T\ D T2 . 
Hi) Ci C C2 if and only if T2 Q Ti . 

^-^) C Oi+^f inod 2) i/ O'f^d only if C^^^-^ 2) QCt. 



We will provide an analytical method not a computer search method to derive such codes. The benefit of this method is that it is 
much easier to derive families of AQEC. We define the classical cyclic code using the defining set and generator polynomial [13], [88]. 
The following lemma establishes conditions when ^ C'l- 

Lemma 223. Let Tq ■ and gi{x) be the defining set and generator polynomial of a cyclic code d for i — {1,2}. // one of the 
following conditions 
i) C , 
ii) gi{x) divides g2{x), 
Hi) h2{x) divides hi{x); 
then C2 C Ci . 

Proof. The proof is straight forward from the definition of the codes Ci and C2 and by using Lemma 222. □ 
The following theorem shows the CSS construction of asymmetric quantum error control codes over Fg. 

Theorem 224 (CSS AQEC). Let Ci and C2 be two classical codes with parameters [n.ki,di\q and [n,k2. d2]q respectively, and 
d^ ^ min{ wt(Ci\C^),wt(C2\Ci^)}, and d^ ^ max { wt(Ci ) , wt(C2\Ci^ ) } . 

i) if C2 C Ci , then there exists an AQEC with parameters [[n, dim Ci — dim , d^/ d^Wq that is [[n.k\ + A;2 — n, d^ / dx]]q . 
ii) Also, there exists a QEC with parameters [[n, fci + /c2 —f^-,dx]]q- 
Furthermore, all constructed codes are pure to their minimum distances. 

Therefore, it is straightforward to derive asymmetric quantum control codes from two classical codes as shown in Lemma 224. Of 
course, one wishes to increase the values of d^ vers, d^ for the same code length and dimension. 

If the AQEC has minimum distances d^ and d^; with d^ > d^, then it can correct all qubit-fiip errors < [(d^ — l)/2j and all 
phase-shift errors < [(rfs — l)/2j, respectively, as shown in the following result. 

Lemma 225. An [[n, k, dz/dcc]]q asymmetric quantum code corrects all qubit-flip errors up to \_(dx — l)/2j and all phase-shift errors 
up to [{d. - 1)/2J . 

The codes derived in [Li, l(i] for primitive and nonprimitive quantum BCH codes assume that qubit-flip errors, phase-shift errors, 
and their combination occur with equal probability, where Pr Z — Pr X — Pr Y — p/3, Pr / — 1 — p, and {X, Z, Y, /} are the binary 
Pauli operators P, see [34, KiS]. We aim to generalize these quantum BCH codes over asymmetric quantum channels. Furthermore, we 
will derive a much larger class of AQEC based on any two cyclic codes. Such codes include RS, RM, and Hamming codes. 



18.3 Asymmetric Quantum Cyclic Codes 

In this section we will give two methods to derive asymmetric quantum cyclic codes. One method is based on the generator polynomial 
of a cyclic code, while the other is directly from the defining set of cyclic code. 

18.3.1 AQEC Based on Generator Polynomials of Cyclic Codes 

Let Ci be a cyclic code with parameters [[n, k, d]]q defined by a generator polynomial gi{x). Let 5 — {1, 2, .... Si — 1}, for some integer 
Si < n, be the set of roots of the polynomial gi{x) such that 

It is a well-known fact that the dimension of the code Ci is given by ki — n — deg(pi(2;)) We also know that the dimension of the 
dual code is given by A;^ — n — ki — deg(pi(a:;)). 
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Figure 18.1: Constructions of asymmetric quantum codes based on two classical cyclic codes 
Ci and C2 with parameters [n, fci] and [71,(^2] such that Ci C Ci+(i mod 2) for * = AQEC has 

parameters [[n, ki + k2 — n, dz/dx]]q where = wt(Ci\C^) and dz ~ wt{C2\C^) 



The idea that wc propose is simple. Let f (x) — (x^ — 1) be a polynomial such that 1 < dcg(/(x)) < n~ k. We extend the polynomial 
gi{x) to the polynomial {x) such that 

g:^(x) = f(x)gi(x) (18.2) 

Now, let g2 {x) be the generator polynomial of the code that has dimension /c^ — n — deg(f{x)gi(x)) < ki. From the eyclic 
structure of the codes Ci and , we can see that < Ci, therefore Cf^ < C2. Let di — wt{Ci\C^) and d2 — wt(C2\Cf^) then we 
have the following theorem. We can also change the rules of the code Ci and C2 to make sure that d2 > di. 

Theorem 226. Let Ci be a cyclic code with parameters [n, ki . di]q and a generator polynomial gi{x). Let he a cyclic code 

defined by the polynomial f{x)gi{x) such that b — dcg{f{x)) > 1, then there exists AQEC with parameters [[n, 2fci —b — n, d^ /dj:]]q, 
where d^ — min{wt(Ci\C^), wt(C2\C'£^)} and d^ — max{wt(Ci\C^), wt(C2\C'£^)}. Furthermore the code can correct [^{d^ — l)/2j 
qubit-fiip errors and [(rf^ — l)/2j phase-shift errors. 

Proof. We proceed the proof as follows, 
i) We know that the dual code has dimension — deg(pi(a:)). Also, has a generator polynomial hi{x) — x^ ~ h'^ {1 / x) 

where hi{x) — {x^ — 1) / gi{x). Let fix) be a nonzero polynomial such that f (x)gi(x) defines a code C^. Now the code has 
dimension k^ — n — dcg{f (x)gi{x)) — n — {ki -\- b) < ki. 
ii) We notice that the polynomial gi{x) is a factor of the polynomial f {x)gi{x) , therefore the code generated by later is a subcode of 

the code generated by the former. Then we have C Ci- Hence, the code has dimension k^ — n — {ki + b). 
iii) Also, the code C2 has dimension k\ -\- b and generator polynomial given by g2{x) — — ^)/if{x)gi(x)) — hi{x) / f (x) . Hence 
the g2{x) is a factor of hi{x), therefore is a subcode in C2, C C2. There exists asymmetric quantum cyclic code with 

parameters 

(a) dim Ci — dim — ki — (n — ki — b) . 

(b) d^ - min{wt(C2\Ci^), wt(Ci\C^)} and d^ - max{wt(C2\Cj^), wtCCi\C^)}. 

□ 



18.3.2 Cyclic AQEC Using the Defining Sets Extension 

Wc can give a general construction for a cyclic AQEC over IFg if the defining sets of the classical cyclic codes arc known. 

Theorem 227. Let Ci be a k-dimensional cyclic code of length n over ¥q. Let Tc^ and respectively denote the defining sets 

of Ci and . If T is a subset of T^j_ \ Tq-^^ that is the union of cyclotomic cosets, then one can define a cyclic code C2 of length 
n over Fg by the defining set — ^^J- \ U T^"'"). If b — |T U T~^\ is in the range Q < b < 2k — n then there exists asymmetric 

quantum code with paraineters 

[[n, 2k — b — n, dz/dx]]q, 
where d^ ^ min{wt(C2 \ C^^), wt(Ci \ C^)} and d^ ^ max{wt(C2 \ C^^), wt(Ci \ C^)}. 

Proof. Observe that if s is an element of the set S = T^± \ Tc-^ = T^± \ (N \ T^^}, then -s is an element of S as well. In particular, 
is a subset of T^j_ \ Tc. ■ 

By definition, the cyclic code C2 has the defining set — ^c'J- \ U T~^)\ thus, the dual code has the defining set 

Tpj_ = N \ T~l = Tc^ U (T U T-^). 

Since n — k — |Tcj^ | and b — \T \J |, we have dimpg Ci — n — \Tci \ — k and dimpg C2 — n — \Tc2 \ — k -\- b. Thus, there exists 
an IFq-linear asymmetric quantum code q with parameters [[n, kQ , d^ /dj;]]q, where 
i) kQ ^ dimCi - dimC^ ^ fc - (n - (fc + b)) ^ 2/c + - n. 
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Tabic 18.1: Families of asymmetric quantum Cyclic codes 



q 


d BCH Code 


62 BCH Code 


AQEC 


2 


[15, 11, 3J 


[15,7,5] 


rr-1 r c /oil 

[[15,3,5/3]]2 


2 


[15,8,4] 


[15,7,5] 


[[15,0,5/4]]2 


2 


[31,21,5] 


[31,16,7] 


[[31,6,7/5]]2 


2 


[31,26,3] 


[31,16,7] 


[[31,11,7/3]] 


2 


[31,26,3] 


[31,16,7] 


[[31,10,8/3]] 


2 


[31,26,3] 


[31,11,11] 


[[31,6,11/3]] 


2 


[31,26,3] 


[31,6,15] 


[[31,1,15/3]] 


2 


[127,113,5] 


[127, 78,15] 


[[127,64,15/5]] 


2 


[127,106,7] 


[127, 77,27] 


[[127,56,25/7]] 



ii) - min{wt(C2 \ Ci^), wt(Ci \ C:t)} and - max{wt(C2 \ Ci^),wt(Ci \ C:t )}- 
as claimed. □ 

The usefulness of the previous theorem is that one can directly derive asymmetric quantum codes from the set of roots (defining 
set) of a cyclic code. We also notice that the integer h represents a size of a cyclotomic coset (set of roots), in other words, it does not 
represent one root in . Table 18.1 presents some AQEC derived from BCH codes 

In this section we establish the connection between AQEC and subsystem codes. Furthermore we derive a larger class of quantum 
codes called asymmetric subsystem codes (ASSC). We derive families of subsystem BCH codes and cyclic subsystem codes over Fg. 
In [11] we construct several families of subsystem cyclic, BCH, RS and MDS codes over ¥^2, with much more details 

We expand our understanding of the theory of quantum error control codes by correcting the quantum errors X and Z separately 
using two different classical codes, in addition to correcting only errors in a small subspace. Subsystem codes are a generalization of the 
theory of quantum error control codes, in which errors can be corrected as well as avoided (isolated). 

Let Q be a quantum code such that TL — Q ^ ■, where is the orthogonal complement of Q. We can define the subsystem 
code Q — A ® B , see Fig. 18.1, as follows 

Definition 228 (Subsystem Codes). An [[n, fc, r, fi]]q subsystem code is a decomposition of the subspace Q into a tensor product of 
two vector spaces A and B such that Q — A B , where dim A — and dim S — . The code Q is able to detect all errors of weight 
less than d on subsystem A. 

Subsystem codes can be constructed from the classical codes over IFg and ¥ ^2 • Such codes do not need the classical codes to be self- 
orthogonal (or dual-containing) as shown in the Euclidean construction. We have given general constructions of subsystem codes in [l 1] 
known as the subsystem CSS and Hermitian Constructions. We provide a proof for the following special case of the CSS construction. 

Lemma 229 (SSC Euclidean Construction). If Ci is a k' -dimensional ¥q-linear code of length n that has a k" -dimensional subcode 
C2 — Ci n and k' k" < n, then there exist 

[[n,n - [k' + k"),k' - fc", wt(C^ \ Ci)]]g, 
[[n,k' - k",n~ {k' + fc"), wt(C^ \ Ci)]]q 

subsystem codes. 

Proof. Let us define the code X ^ Ci X Ci C F^"", therefore X^^ ^ (Ci x Ci)"^^ - C^' x C^^ . Hence Y ^ X n X^^ ^ 
(Ci X Ci) n {C^^ X C^^) - C2 X C2. Thus, dimpg Y ^ 2k" . Hence |X||y| ^ q^{k'+k") ^^^^ |X|/|y| ^ g2(fc'-fc")_ Theorem [14, 
Theorem 1] , there exists a subsystem code Q — A ® B with parameters [[n, log^ dim A, log^ dim B. d]\q such that 
i) dimA - g^/(tX||y|)i/2 ^ ^^-k'-k" _ 

ii) diuiB ^ {\X\/\Y\)^^^ ^ q^'-^" . 
iii) ^ swt(y^^\X) ^ wt(C^ \ Ci). 

Exchanging the rules of the codes C\ and gives us the other subsystem code with the given parameters. □ 

Subsystem codes (SCC) require the code C2 to be self-orthogonal, C2 C C^. AQEC and SSC are both can be constructed from 
the pair-nested classical codes, as we call them. From this result, we can see that any two classical codes Ci and C2 such that 
C2 — Ci n C , in which they can be used to construct a subsystem code (SSC), can be also used to construct asymmetric 
quantum code (AQEC). Asymmetric subsystem codes (ASSC) arc much larger class than the class of symmetric subsystem codes, in 
which the quantum errors occur with different probabilities in the former one and have equal probabilities in the later one. In short, 
AQEC does not require the intersection code to be self-orthogonal. 

The construction in Lemma 229 can be generalized to ASSC CSS construction in a similar way. This means that we can look at an 
AQEC with parameters [[n, k, dz/dx]]q. as subsystem code with parameters [[n, k, Q, d^ / dx]]q . Therefore all results shown in [11, 14] 
arc a direct consequence by just fixing the minimum distance condition. 

We have shown in [II] that All stabilizer codes (pure and impure) can be reduced to subsystem codes as shown in the following 
result. 

Theorem 230 (Trading Dimensions of SSC and Co-SCC). Let q be a power of a priine p. If there exists an ¥ q-linear [[n.k. r, d\]q 
subsystem code (stabilizer code if r — 0) with A; > 1 that is pure to d' , then there exists an ¥ q -linear [[n, — l,r-t-l, > d]\q subsystem 
code that is pure to min{fi, d'}. If a pure (¥ q - linear) [[n, k. r, d]]q subsystem code exists^ then a pure (¥ q -linear) [[n, fc + r, d]\q stabilizer 
code exists. 
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18.4 AQEC Based on Two Cyclic Codes 

In this section wc can also derive asymmetric quantum codes based on two cyclic codes and their intersections. We do not necessarily 
assume that the code Ci is an extension of the code . However, we assume that C Ci. The benefit of designing AQEC based on 
two different classical codes is that wc guarantee the minimum distance to be large in comparison to d^. In this case wc can assume 
that Ci is a binary BCH code with small minimum distance, while C2 is an LDPC code with large minimum distance. 

The only requirement one needs to satisfy is that d C Ci^i( mod 2)- There have been many families that satisfy this condition. 
For example (15, 7) BCH code turns out to be an LDPC code. Wc will show an example to illustrate our theory. 

The following two examples illustrate the previous constructions. 

Example 231. Let Ci be the Hamming code with parameters [n, k, 3]2 where n — 2"^ — 1 and k — 2"^ — m — 1. Consider C2 be a 
BCH code with parameters n and designed distance S > 5. Clearly the dz = wt(C2) > d^ — wt(C'i) — 3. Let /c2 be the dimension of 
C2, then one can derive asymmetric quantum code with parameters [[n, fci + ^2 — "n-, dz l'i\]q. In fact, one can short the columns of 
the parity check matrix of the Hamming code Ci to obtain a cyclic code with less diinension and large 'minimum distance, in which 
it can he used as C2 ■ 



Example 232. Let F13 be the finite field with q ^ 13 elements. Let C\ be the narrow-sense B.eed-Solomon code of length n — 12 
and designed distance (5 — 5 over Fi^. So, Ci has defining set Tc-^ — {1,2,3,4}. Therefore, C\ is an MDS code with parameters 
[12,8,5]. The dual of Ci is a RS code Ci with defining set T^± — {0,1,2,3,4,5,6,7}. Also, C^ is an MDS code with parameters 
[12,4,9]. 

Now, let us define the code C2 by choosing a defining set Tc2 — {1:2,3,4,7}. So, C C2 -'^^ ^C'2 C ■ Also compute 

the defining set of C2 o.s — {0,1,2,3,4,6,7}. So, C^ C C2 ^ '^c-^ ' -^^^^'^j '^'^''^ compute the parameters of 

the asymmetric quantum error- correcting codes as follows. The minimum distance is given by dmin — C^\C — 5, dimension 
k — dim{Ci) — dim{C) — 8 — 7 — 1, and gauge qubits r — dim{C) — dim{C^) — 7 — 4 — 3. Therefore, we have a subsystem code with 
parameters [[12, 1, 3, 5]] , which is also an MDS code obeying Singleton bound k -i- r -\- 2d — n -\- 2. 



18.5 Conclusion and Discussion 

Wc presented two generic methods to derive asymmetric quantum error control codes based on two classical cyclic codes over finite 
fields. Wc showed that one can always start by a cyclic code with arbitrary dimension and minimum distance, and will be able to derive 
AQEC using the CSS construction. The method is also used to derive a family of subsystem codes. 

Based on the generic methods that we develop, all classical cyclic codes can be used to construct asymmetric quantum cyclic 
codes and subsystem codes. In a quantum computer that utilizes asymmetric quantum cyclic codes to protection quantum information, 
such codes are superior in a sense that online encoding and decoding circuits will be used. In addition quantum shirt registers can 
be implemented. Our future will include bounds on the minimum distance and dimension of such codes. Furthermore such work will 
include the best optimal and perfect asymmetric quantum codes. 

Such asymmetric quantum error control codes aim to correct the phase-shift errors that occur more frequently than qubit-flip 
errors. An attempt to address the fault tolerant operations and quantum circuits of such codes are given in [181], where an analysis for 
Bccan-shor asymmetric subsystem code is analyzed and a fault-tolerant circuit is given. 
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